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INTRODUCTION 


rrr 


‘One does not need to be a professional thief or aspiring burglar to 
кар benefits from ibis book. Although it sometimes reads like a How- 
То manual, it was writen primarily to show homeowners their 
vulnerabilities, to teach law enforcement officials some tricks of the 
burglar trade, and to inspire burglar alarm manufacturers and installers 
to seek new methods of deterring and detecting burglary. This book 
docs not give profesional burglars any information that they do not 
already possess, and 1 believe that society is best served when 
information is available to all, rather than io а select few. Burglar 
alarm jumpering and bypassing is mere tradecraft for the profesional 
burglar, but printed information on the methodology of this rare 
scence is scarce, to say the least. 


Burglar alarms are always installed for one reason: to protect 
something. Whether its valuables, one's Ше, tems of sentimental 
"alus, ty the objective of the burglar alarm remains the same. Long. 
ago, people wed the safety of high walls and castles to protect 
themselves and their property. Later, the keylock was invented 10 
protect valuables, and today we have high-security locks, vau, and 
alarms. Human guards have been used throughout history to protect 
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asses, and the modem burglar alarm is simply а guard made of 
electronic components. But like its predecessors, it too is fallible. 


Every now and then, a new technology emerges which finds its way 
into the security industry. For example, the Passive Infra-Red alarm 
‘stem commonly in use today was a by-product of the research on 
catsccking missiles conducted by the military. But just as technology 
marches on towards the good of mankind, so too docs it march for 
the resourceful crook. Опе can be certain that the state-of-the-art 
alarm system that is installed today can be bypassed tomorrow, for 
criminal technology is constantly on the heels of security technology. 
From the first "unpickable" lack ever picked, to the “fool-proot” bio- 
mechanical systems being compromised today, the evidence is 
‘Overwhelming that “absolute security" exists in theory only. 

“We shouldn't discount the value of burglar alarms, however, for 
they do eam their keep, They often catch the impulse thief, the crow- 
bar-wiciding amateur who risks jail for a VCR or television while 
ignoring the original Renoir on the wall, They also deter the advanced 
amateur, who, realizing an alarm impedes his progress, opts to try 
Somewhere else where по alarm has been installed. And frankly, they 
increase the chance that a professional burglar will be apprehended, 
but for him, this is a calculated risk. He knowingly accepts this risk, 
just as an astronaut accepts the inherent risk that accompanies space 
travel. However, unlike the unlucky astronaut who pays for his 
mistakes with his Ме, the professional thief knows that even if he is 
‘aught he will serve, according to national crime statistics, an average 
sentence of only one year and nine months. 

The actual number of professional burglars is probably very low, 
and шев you own something of extreme value, it is unlikely that you 
Will become the target of а professional. Therefore, a professionally 
installed burglar alarm system will probably be more than enough for 
your security needs, If, however, you have valuable possessions that 
make you a candidate foe a profesional burglary, you should re- 
member this onc axiom: по system will чор an intelligent and 
dotermincd burglar if he wants your possessions badly enough. 

Ihave worked in the security industry for years, and I've seen most 
of the alarm components and systems in use today. Гуе abo dis- 


covered ways to bypass many of them. Some methods are admittedly 
crude, hut others are quite айу. 1 have not attempted to include 
езегу technique of bypassing alarms in this book, because new tech- 
niques are constantly being discovered, and it would be quite im- 
possible to explore every possibility, T have, however, included the 
‘most common ways that burglars defeat our attempts to protect our 
homes and businesses. 


In closing the introduction, 1 would like to remind the reader of a 
fact that at first glance seems paradoxical. That is, as burglar alarms 
‘become more and more sophisticated and complicated, the less and 
less secure we actually become. The reason is because we begin to put 
1oo much faith in them, and soon we are convinced that cur homes 
and businesses are burglar proof. We tend to subconsciously instill the 
system with the ability to catch burglars, and we automatically assume 
thatthe system will compensate for our laxity. As a геш, our entire 
security is placed in the hands (or chips) of a machine, and machines 
эге much more susceptible to compromise than are humans. As you 
will see, a magnetic switch does not "know" when a door or window 
& opened, it merely detects the absence of its companion magnet. A 
Passive Infra-Red Detector does not "know" when an intruder enters 
а protected room, for it simply detects the changes of temperature 
‘within the room. Therefore, any situation that is necesary can be 
manufactured, and the component can he made to “think” that all 
wel. 

An alarm is a very useful tool that every homeowner, rich or 
middle-income, should own. It will protect you and your valuables 
from all but the most determined thief. An alarm system allows for. 
‘an incredible peace of mind, and i is ап asset when selling a home. 
However, a burglar alarm will not provide an impenetrable barrier 
behind which you and your family can hide, as this book will prove. 


PARTI 


Burglar Alarm Systems 
nnn 


Par Kis an introduction to the various types of alarms in use today. 
Inthe first chapter, hard-wired protective circuits, the most common, 
are discussed. These are the circuits that guard а building's perimeter. 
‘Therefore, they are used primarily on doors and windows. The most 
common member of this family is the ubiquitous magnetic switch, the 
litle set of white rectangular boxes seen above the doors of most 
businesses, The second chapter deals with the second line of defense, 
the urea sensor, These sensors monitor a specific area rather than а 
specific point of entry. These are often called motion detectors, since 
anyone moving about a guarded room will be detected. The manner 
in which these sensors achieve this goal varies between components, 
The third chapter offers some general notes and observations on alarm 
bypassing before the examination of specific components begins. 
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Protective Circuits 
nnn 


‘The Protective Circuit system is the most common alarm apparatus 
in use today. Therefore it is imperative that you fully understand the. 
principles involved. The premise of the protective circuit is that if a 
sed circuit suddenly becomes open, o if an open switch suddenly 
becomes closed, ап alarm will sound, Look at Fig 1-1 (see page В). 
The electric currentis travelling throughout the entire circuit at near 
lightspeed, from the batteries through the wire, to the switch, to the 
control panel, and to the batteries again. This i known as а protective 
cuit The current will travel throughout the circuit as long as there 
are no interruptions, But let say the switch pets pulled арап. See Fig. 
1-2 (page 8) Now, the contol panel's electronics tell i that the circuit 
i no longer intact, and а relay sends power to the bell which makes 
t ring, thus announcing an intrusion. This method of monitoring is 
known as hardwiring because all components of the alarm are 
connected by electrical wire, as opposed to wireless alarms that 
transmit their signals to the control panel, (These are discussed in 
Chapter 2) Basically all hardwire systems contain magnetic switches 
on doors and windows, a control panel to which they are connected, 
batteries for power, and a loud bell or siren, For the sake of simplicity, 
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Ive shown the circuit below with only one switch, However, most 
alarms have several, sometimes dozens, of different switches to cover 
all posible points of entry. 


Flow of Current. 


A protective cireuit alarm in йе closes poston 
Annunciator 


igure 12 
The arm is riggered when е sic is opened 
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1а Figure 1-3, you can see am alarm system containing six different 
switches, In an average home, we could dedicate two ofthese to our 
front and back doors, and the other four to first-floor windows. A 
violation on one of thes six points of entry would trigger an alarm 
signal, Electricity is curious thing, however. Note the flow of current 
ın Figure 1-3, The current must flow throughout the entire series of 
switches before it returns to the batteries and control box. И a clever 
burglar were to place а "jumper wire" across the circuit (see Fig, 1- 
4 on page 10), the circuit would remain intact, and the panel box 
‘would be nonc the wiser. The thief could then violate switch after 
switch without setting off an alarm because electricity always follows 
the shortest path to complete the circuit, when given а choice. 


Closed Switches 


25 


Figure 13 
А protective circi alarm with atch for 
‘ach roeced рот of eur. 


Зо it would seem that all a thief must do is locate the wires to and 
from the circuit, and jumper them to bypass the entire system. While 
the theory is true enough, it is a bit more difficult in practice. 
Jumpering is still fairly common when bypassing basic components 
хой the cheap do-it-yourself burglar alarm kits, but becomes much 
more difficult when the thief encounters professionally installed 
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systems. Wires are usually hidden under floors and in walls, and often 
phony wires, that do absolutely nothing, are combined with the real 
Ones to throw a would-be burglar off track. Also, the batteries are 
usually strategically placed somewhere within the circuit (other than 
the control panel) so that even if the correct wires are found, an 
attempt at a jumper near the control box would fail, because the lack 
‘of power will not complete а circuit. If that’s not enough to dissuade 
эп intruder, alarm manufacturers, in their constant sare of paranoia, 
‘have installed in many high quality panels, an end-oftheline resistor. 
"This measures the constant specific resistance in the circuit, И any 
change in this resistance is apparent, due to jumpering, for example, 
fan alarm will still sound, One way burglars get around this 
inconvenience is to place on the jumper wire itself a potentiometer ог 
variable resistor. Afer the resistance of the circuit is registered on a 
multimeter, or an ohmmeter, the jumpers potentiometer would then 
фе set to that resistance, and the “Jumper-er” hopes for the best 
However, the end-oftheline resistor is sometimes so sensitive, that 
even the smallest change will trigger an alarm. So obviously, this 
method would work only on an end-of-the-line resistor whose 
tolerance is rather lenient. 


Open Switches 


Figure 14 
A jumper wire defeats йе alarm by keeping the circuit chsed. 
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umperig is a very common method of burglar alarm bypassing, 
and is the method of choice for the semi-sophisticate. However, it only 
works on a totally hardwired system, and is very unreliable due lo 
some of the modern safeguards. Sometimes before reaching a suitable 
jumpering point, onc must violate a switch in the proces, thus 
defeating his own purpose. But there are many more effective methods 
of bypassing this system, as you will see in later chapters. 
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Area Sensors 
УМАМА 


The other type of alarm system that we'll cover is known 
collectively as “Area Sensors.” Unlike protective circuits, that cover 
only specific points of entry, the area sensor, or motion detector as it 
is sometimes called, is relied upon to monitor large rooms or even 
Whole buildings. This type of system erect invisible barriers that must 
be penetrated in order o enter or move about the aren. These barriers 
sare not easily defeated, and are sometimes difficult to detect 


1E Mr. Wilson owned a large retail store, he could probably keep 
most criminals out with electrified fences, bars on the doors and 
windows, and several Dobermans in the parking lot. But if a thief hid 
himself їп the store during business hours, he could pilfer at his leisure 
after business hours. Mr. Thief would not violate any perimeter 
alarms, get electrocuted, nor get bitten (until he left, that is). However, 
with the advent of aren sensing devices, the thief that tried this trick. 
atthe local K-Mart would have to be prety sneaky. If he makes à 
noise, has а body temperature greater than sixty дерти, has con- 
ductive skin, or is made of matter, be will more than likely set off an 
alarm. 
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АП а is very disheartening for Mr. Thief, but very good for Mr. 
Wilson, the store owner. For now he can install an areasensor учет 
that is more reliable than the Dabermans and electric fences at a 
fraction ofthe cost. 


Sometimes these detectors transmit their signal to a centralized con- 
rol panel within the home ог business, and can be used in conjunction 
with a hardwired, protective-cienit system. Many systems allow you 
1o directly incorporate the motion detectors into the line of the circuit, 
so that when the sensor "senses" something, it opens (ог closes, de- 
pending on the system) а switch, just as a door contact would. 

The list of obvious advantages of this system is enormous. One 
‘could monitor а room containing sensitive documents, or overlap 
many of them to cover several acres, Thus, the primary benefit of this 
generation о security system is the relatively inexpensive cost involved 
în monitoring large surface areas, Although they are impractical for 

ding single objects, such us а painting, they are sometimes used 
inside safes and vaults just in case the other methods of detection and 
deterrence have failed. 

Because of the nature of these systems, motion detectors cannot, of 
course, be used where motion frequently occurs. Dog and cat owners 


who keep their pets indoors are generally excluded from using area 


false alarm is the primary disadvantage of the area sensor system. A 
'heitdud may blow on a heat detector, wind may set off а sonic 
alarm, a fre engine's siren may set off а preamplifier, a dog in the 
parking lot may cause a microwave system to go into an alarm 
condition, and countless other harmless things can happen to 
‘compromise the reliability of area sensors. I is better, | suppose, for 
these айтта systems t) be over sensitive rather than undersensiive, 
‘but herein lies the opportunity for the imaginative burglar. 

‘There are six types of area sensors that we will discuss in depth in 
Parts Ш and Ш. These are the passive Infra-Red system, the ultrasonic 
unit, the microwave system, electric eyes, proximity sensors, and 
preamplified microphones, Explicit instructions will be given in later 
(йари оп how burglars detect and defeat each of hem. 
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Random Thoughts 
On Alarm Bypassing 


Alarm bypassing i an ап form that is over a century old. Shortly 
afier Alexander Pope patented his electromagnetic contact alarm in 
1853, thieves learned that they could get around this inconvenience 
by simply cutting the wires. And since 1853, members of both sides 
of the law have been running neck and neck in their struggle t0 con- 
quer the other. Amazingly, after nearly 140 years, the most common 
perimeter alarm in existence today is still the Pope electromagnetic 
switch, although slightly modified. The only real advance has been the 
advent of interior alarms, or area sensors, and they have been intro- 
duced in just the last dee decades. 

‘The chief drawback of any alarm system is its presumption that the 
burglar will enter in a conventional manner. That is, the owner of a 
perimeter alarm system believes that since he has guarded the win- 
dows and doors, an entry is imposible without the perimeter alarm 
knowing about it, However, an enterprising thief can enter a house 
‘anywhere by making his own door with a sledgehammer and chain 
saw. Walls are certainly psychological deterrents to most, but a pro- 
fessional knows that between he and your home lies only smashable 
bricks and cuttable wood. Granted, you probably won't see the old 


sledgehammer/chainsaw ploy used in downtown Chicaga, But н is 
‘quite possible that it happens every day in Suburbia, USA. 


While the sledgehammer and chainsaw have their uses, there are 
many more tools that the professional burglar possesses. He may have 
ca lockpick se, doocjamb spreader, glaziers’ and wall climbing equi- 
then, miniature transmitters, Infra-Red goggles, and bolt cutters, just 
to name a few ofthe big-ticket items, He certainly has many smaller 
tools that be can use on certain occasions, such as glass cutters, Uhri- 
Violet marking chemicals, handcuff keys, and pry bars, Using these 
tools and others, he always Likes the path of least resistance Vo ac- 
complish his objective. Which brings us to the most important tool 
in the burglar’ arsenal: planning 


Planning в only possible after careful and deliberate study of the 
propesed target. Of cours, а burglar never knows what he will come 
cross, but it helps when he has eliminated several possibilities, For 
‘example ifthe burglar is certain that he can enter through the door- 
Way, he will leave the unnecessary equipment, such as glaziers 
equipment and chainsaw, at home. With proper reconnaissance and 
planning, itis aot even necessary for a burglar to worry about alarms, 
fa thief was certain there was а valuable painting in someone's 
second floor bedroom, could he break through a window, run up- 
stairs, grab the pointing, and leave before the police arrived? Most 
assuredly he could 


"The other elements of alarm bypassing, besides planning, are 
detection and execution, Detection is important because one cannot 
bypass an alarm if he docs not know it is there, Detection is most 
tl safely, and effectively accomplished prior to the execution, This 
i of course, not always possible, зо in Parts [1 and Ш, TW show on 
the spot methods of detection that thieves often employ. But some- 
times, under the guise of customer, insurance salesman, potential 
еш. tc. a burglar may “case” a home or business for the upcoming 
burglary, Also, there are methods of “preventive bypass” 10 counteract 
invisible, but possible alarms, but they are usually time consuming and 
burglars rarely depend on them. Examples of this are cutting holes in 
door to void having to open them, or "walking а tightrope” to avoid 
Stepping оп a carpe that may contain a pressure sensitive mat. A prO- 
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fessional burglar maintains the state of mind that anything can be a 
тар, and be always acts accordingly. 

Afer planning and detection, comes execution. This is accomp- 
lished by knowing the pitfalls of the alarm component Detailed 
instructions for thwarting these components are contained in Part П, 
but they are by no means complete, for new methods are always being 
created by resourceful burglars, Execution can mean geting around 
эп alarm component, or it can mean shutting the entire alarm system 
own. Almost every day, а person “legitimately” turns off his alarm 
system, This is done because he comes home from work, or because 
he is opening ҺЕ store for business, and in either сше he no longer 
needs an alarm, But because these systems can be legitimately turned 
of they can akso be “legitimately” turned off, as will be explained 
in Part Ш. 


PART П 


Local Alarm Bypassing 
anny 


In Part I, we will examine each component ofa local alarm system, 
and see the most common ways of detecting and defeating them. A 
local alarm system is one that rings п bel, sounds а siren, or in some 
way notifies everyone in the surrounding area that a burglary is in 
progress. A monitored alarm, which is discussed in Part Ш, contains 
All the components of a local alarm system, except that it i silent to 
the burglar, Instead of bells and sirens, it secretly sends a signal to the 
police, alarm company, or guard agency. 

‘The advantage for the burglar in bypassing local alarms is that he 
will know immediately if he has made a mistake, for the clanging of 
s bell is the giveaway. And, unlike а monitored alarm system, he needs 
only to bypass the necessary components instead of the entire system. 
Furthermore, the local alarm offers as many or more avenues of 
circumvention as does the monitored system, as you will see. 
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Silencing The Annunciator 
WANNA AAA AAAAAAAAAAAAARARAARAARAARANY 


There are two basio pars to every local alarm system in use today: 
the sensing device that detects the intruder, and the annunciator, If 
“бег part в nullified, then so is the entire system. The ancuncisior 
‘of an alarm system is generally a bell, siren, buzzer, horn, or other loud 
device (see Figure 4-1). It is meant to let everyone in the immediate 
vicinity know that a burglary is in progress. The problem is, most 
people simply ignore bells and sirens when they hear them on à busy 
эше, Most homeowners, however, have told their neighbors that a 
bell or siren means trouble, and to сай the police. If police happen 


)0202 ن 


Figure 1 
Alarm sytem anrincitors 
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to be in, the area when the alarm sounds, they usually become mo- 
‘mentary confused, That is becuse in a large subdivision, itis dificult 
10 pinpoint ће origin of the clangor, due 10 echoing: 

The annuacisor is usually on the outside of the house or business, 
20 ш o raise the most commotion, although occasionally one is also 
placed indoors. 

Locating tbe annunciator is relatively eas. It is nearly always very 
high on the sides or back of the bouse or busines. I is either surface 
mounted or semifheh mounted, and may even be encased in a 
protective housing (ке Figure 4-2), This protective housing will have 
small sits to allow the sound to escape, and is nearly always protected 
against tampering. Any ает on be part of the burglar to tamper 
‘With the door or wires, will generally result in ап alarm condition. A 
‘00d annuncistor will also have a relay and a tiny generator that will 
power the bell if someone trios to cut off the Чесипсйу. The housing 
тшу be key-locked, to allow for easy maintenance (see chapter 13 for 
lack information). As 1 pointed out earlier, no components of a local 
slam need to be bypassed if he annunciator can be properly disabled, 


igure 42 
Annancicor are sometimes encased in а protective housing. 


‘The first goal of the burglar is finding the annuncistor, If it is not 
immediately visible, he may purposely set off an alarm зо that he may 


Soci e Annunciato 23 


dicem from where the sound is emitted, This is also û good op- 
петину forthe thief to time the arrival of the police, at a safe 
Stance of course. Once the bell o siren i found, the problem of 
йд 1o it arises A ladder, in rural areas, may suffice, but carrying 
2 ladder to a strange house is slightly conspicuous. Burglars prefer 10 
"limb the wall if possible, or climb a ope ladder that has boen thrown 
это and асе to the roof by a grappling book. 

However the annunciato is reached, the next чер is to attempt 10 
disable i prior to the housebreaking. Burglam often take the pre- 
‘auton of wearing earplugs or headphones, such as the kind hunters 
Sr shooters ше. There i nothing quie as startling as holding onto а 
‘ope while 120 decibels suddenly pour into your eu, By the way, 120 
B, which is well into the pain level, quite common for alarm sirens, 
Prolonged exposure at this tentoran level, will certainly cause per- 
maneat deafness 

IË the sanuncator s an exposed bell, tbe clangor may be sipped 
wit tolit, or removed with а cutting torch. A sull buzzer, 
Uke the fire alarms in schools and hospitals, б easily knocked Ой the 
wall with sledgehammer if it is done quickly and forcefully. An ex- 
posed hom can be filed with modeling cay and tampad tightly, io 
crease the audio output A sien may also be filed with clay, but 
thieves have eared that the entre siren, inside and oul, must be filled 
completely, of sound will escape through the sides. Many times, the 
Sider and/or cheaper model will even have a simple on/off switch 
oa them. 

If the annunciato is housed in a яей box, it is easily silenced 
without removing the door. The housing often Contains small slits or 
Теп, but if not, a mil hole can be made with a portable dril. Ino 
this hole, several cans of aerosol styrofoam, the kind used for 
weatherproofing and insulating, are sprayed. When this dries and 
ае in a mater of minutes, it creates n nearly sound proof barrier 
thatthe annageiator cannot penetrate. Amateurs and novices, who 
have heard ofthis technique, use shaving cream or something of a 
Similar consistency, but it is less effective than the fast-drying 
insulation foam. 

the larceny is to be perpetrated later in the week, or perhaps the 
зем day, ап even more reliable method may be кей. Instead of the 
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small hole, а larger one, about 17 in diameter, is bored into the top 
of the steel housing, Very dry concrete, made without gravel, is then 
introduced into the hole using а funnel ora cake decorator's bag, until 
the entire housing is filled completely. Similarly, there is a liquid that 
pours like water, and hardens like glass in а [ew minutes, and is 
‘marketed under the trade name, Castlite®. Wax is also a possibility, 
but a best source is obviously required. There is a slight danger in 
using these techniques, because liquid containing water is conductive. 
The introduction of concrete or any other liquid into the anmunciator 
housing, may result in à closed switch, sounding the bell or siren. It 
would be somewhat muffled, of course, but sound would be emitted, 
nevertheless, Another possibility, although I've never seen or heard of 
it being done, is to actually build a muffler around the annunciator, 
and fil it with a suitable sound-proofing material, 

none of the above idea are appealing, one may remove the bricks 
‘or siding surrounding the inexpensive annunciator, and search for any 
wires, If they are all cut simultaneously, the anmunciator shouldn't 
annunciate, provided thatthe wires that аге cul are the real ones. 

When sound ravels (rom an object, it decreases in intensity ex- 
ponentially. А 120 dB annunciator is perceived to be only 95 dB at 
а distance of ten feet, and at one hundred feet, the decibels will have 
dropped tremendously, Considering that the nearest house ог business 
will be about twenty feet away, the alarm signal will appear sig- 
nificantly fainter than it would at the source. If ihe burglar had an 
accomplice operating an air powered jackhammer (that averages 97 
В) in front of the neighbor's house, an alarm signal would probably 
go unnoticed. If two accomplices were operating jackhammer the 
effect would be even more profound. Of course, they had better have 
pretty good pretexts in case the neighbors wonder why in bell they re 
tearing up the sidewalk. OF course one may have three, four, or five 
accomplices with jackhammers, but the potential payoff would have 
10 be prety large for anyone to go to that much trouble. 
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Magnetic Contact Switches 
enn nahin nnn 


The magnetic switch, the mest common of all hardwired compo- 
ens is found on doors and windows around the world. И consists 
‘ftw individual pieces, the switch ise, and the companion magnet. 
(sce Figure 5-1 on page 26). The switching mechanism is a spring 
loaded lever that makes contact with a stationary metal arm when the 
companion magnet is near. Thus, the magnetic switch is a normally 
closed circuit. When the magnet is pulled away (ee Figure 5-1 on 
page 26), the lever в released from the stationary arm and the circuit 
® no longer complete. So, the opening OF a protected door or window 
removes the magnet from the sic, and, since the circuit по longer 
complete, the alarm sounds. Since ihe circuit of а magnetic contact 
swich is normally closed, wires cannot be eut to defent the system, 
for this has the same effect as removing the companion magnet 
The magnetic switch обез more opportunity for jumpering than 
does any other individual component. Since the wires are often visible, 
fone nels ony to remove the insulation, and place а smal! wire acros 
the circuit to defent and bypass the switching mechanism (c Figure 
52 on page 27) The main problem foc the thief then, is simply 
locating the wires, if they are not visible. Often they are hidden behind 
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baseboards or trimming, or are snaked through the studs behind the 
drywall. They may be uncovered from the outside, after the bricks and 
‘wallboard have been removed. 


Closed Switch Figure s1 Open Switch 


A common magnetic switch Оп the lf, he circu is closed 
When the magnet i removed (right) the стиш! opens and 
riggers the alarm. 


Usually, one has to already be inside to get at the wires, however 
there are a few tricks that burglars employ. A hole may be dled or 
сш in the door or window, and a fibescope may be inserted. А 
fibesscope has viewer and a long flexible tube that allows one to sce 
around comers and into small places. They are used primarily by | 
doctor and electricians, but they also make an effective instrument | 
for bypassing magnetic switches. If, afer inserting the fiberscope, there 
are visible wires on the inside, another larger hole can be made 
through which an arm will pass By watching the procedure through 
the iberscope, the wires are easily Pared and jumpered. The door сап 
then be opened without creating an alarm condition 
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Figure 52 


The magnat sich is vulnerable to jrpering. The jumper wire 
mantis closed cre 


Of course, if one is going to cut a small hole, and then а larger one, 
a person could just cut a really huge hole in the door and crawl 
through it. But this is a bit more difficult with windows, because they 
эге sometimes too small to craw through, and because they may also 
be ung window foiling (ee next chapter): But ойе, a hole can 
зай be dled inthe window, and jumpering accomplished if the vires 
are visible, One way to make the wires visible sto unscrew the switch 
and give it litle pol. The wires will probably be stapled and may 
be dificult to pull, but there is a small chance that the wires were just 
stuffed in beween the studs. This ё done carefully so the swich is 
not removed too far from the magnet, One may ako cut the drywall 
located behind the switch in an attempt to locate the wires. Alo, if 
posible, ће magnet may be unscrewed from the window itself and 
taped to the switch. The window could then be freely opened 
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Since the visibility of ordinary magnetic switches aids in their 
defeat, some companies ate manufacturing many varieties of recesed 
switches (see Figure 5-3 below). These switches generally go 
unnoticed, and can be very dangerous to the burglar who, after not 
Seeing the old magnetic contacts, believes that the door is unprotected. 
‘The magnet is usually placed in the door, and the switch is usually 
recessed in the door frame. If one has acces 10 the door during 
"normal hours” one may spy the telltale circle in the bottom of the 
upper door frame (see Figure 5-4 on page 29). Even if they can be 
seen, they are very difficult to jumper because one must remove, or 
Cut through, the drywall and trim, to reach the wires. Recessed 
magnetic switches cannot be seen with a fberscope either, so that 
brings us to our next topic, the detection of magnetic switches. 


‘Switch 
& Magnet 
Figure 53 
А modern recessed magnat ch, 


A high-quality liquid filled compass will react wildly when in the 
presence of a magnet. One placed near а door or window will 
certainly tell the user if a magnetic switch fs nearby. After a compass 
has determined that а magnetic wich is indeed there, a gaussmeter 
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сав be used to determine the exact magnetic strength, А magnet with 
ihe same strength and field is sometimes used to quickly replace the 
old magnet, making the switch none the wiser. A gaussmete is very 
expensive, and very few systems outside the realm of high-security 
utilize bias sensors that sense diferent magnetic fields, So a gadget 
available through many scientific suppliers, called а Magnaprobe, will 
work in most situations to pinpoint the magnetic switch. 


Magnet did 
T 


Figure S4 
A recessed switch implanted in door and fame, This swich i 
very difficuli o jumper. 


In any of the cheaper versions that do not monitor the specifie 
magnetic strength, but just need any magnet 10 hold the switch 
together, a super strong magnet will suffice. Burglars often use à 
Neodymium-ron-Boron composite, which makes for a very efficient 
magnet; NIB magnet the size of a quarter has a lifting power of about 
топ pounds It is often affixed to a coat hanger and manipulated inside 
the premises, near the switch, The magnet is carefully maintained in 
such а way that it closely resembles the position of the old magnet. 
The door or window will then probably open without complications. 
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Iw burglar doesn't know, ог care to use, any of the above techniques, 
купшы a mip аары 
thro 
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Window Foiling 


n 


Inthe last chapter, we discussed the primary line of residential win- 
dow defense, the magnetic switch, but in this chapter, the most com- 
mon window monitor for commercial applications will be covered. 
Window foiling is probably the alarm component with which laymen 
are most familiar, It graces the windows of nearly every liquor store, 
grocery, and service station in America, and rightfully so, for it is very 
dificult to bypass successfully. In the past, the unsighilincss of window 
foil effectively kept й from widespread residential use, however, 
modern homeowners are becoming increasingly concerned with зе. 
curity, even at the expense of beauty. 

When a window is to be monitored by foil, the foil is stretched 
around the perimeter of the window (se Figure 6-1 on page 32) Two 
“take-off blocks," or terminals, are placed at the end of the foiling and 
connected to the rest of the circuit, The foil, now part of a normally 
closed circuit, is so fine that if a break occurs in the glass, the foil will 
tear, opening the circuit. 

ойор is often coupled with magnetic switches, and there lies the. 
bie problem forthe burglar. If he cannot raise or break the window, 
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Bow can he enter? The easiest way of bypassing this component is to 
simply avoid it and try entering somewhere else, but there are a few 
possibilities for the determined thief. There are thee primary methods 
that burglars employ when defeating window fol. Amateurs, on the 
‘other hand, who don't fully understand the principles of a window foil 
circuit, try some crude methods that are usually unsuccessful, They 
sometimes smash the window, and hope that the foil won't break as 
well, The odds of this happening are astronomical since the foil is very. 
tightly stretched, and breaks at the slightest provocation. Гуе even had. 
то repair foil that had torn during a simple wind gust. Amateurs even 
пу cutting the entire window ош, since it allows them to get al, aad 
jumper the terminals, But any slight movement in the wrong direction 
sete off an alarm (while they're holding a 20 pound sheet of glass). 


Foil 


Figure 6-1 
A ribbon of thin fall is stretched around the perimeter of a 
‘indo: Any tear in the fol riers бе alarm. 


One method that will work, provided the window is large enough 
(or the burglar is small enough), is the cutting of a crawl space in the 
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window that is far enough from the foil that it remains undisturbed. 
The entice window is covered with а strong duct tape, leaving blank 
‘he hole intended to be cut. The hole, preferably square, is scribed with 
«high-quality diamond tipped glass cuter. The cutter is then used to 
race and retrace the scribed fines ший the glass gets quite thin. When. 
^e lins have been determined to be deep enough, a thin layer of 
modelling clay is applied to the glass area that is to be removed. Then, 
з thick, wet newspaper (to shield noise) is laid over the potential hale 
nd tapped sharply around the scribed lines. With any luck, the glass 
sil break only where the lines were cut, The duct tape serves as a 
леса вође, and also keeps the glass from shattering and falling 
the floor if a mistake is made. The layer of clay serves 10 deaden 
ie sound of he glass as it hits the floor inside 
Another method often used is the jumpering of the two foil 
erminals, If they are visible, a small hole is drilled ito the glass near 
ım, using a carbide bit, А wire i then laid cross the terminals to 
smpletely bypass the whole foiling system. The wire is, of course, 
stened securely то the terminals to avoid having it fall off during any 
эл of the mission. A more reliable method involves baring the wires 
ming from each terminal and jumpering them. This is obviously 
<ul, since many times the wires are not visible, and since one is 
mpting it through а small hole. At any rate, if jumpering is soc- 
=sfully accomplished, the entire pane of glass can be shattered with- 
st setting off an alarm. 
‘The third method is utilized when one has prior acotss to the 
mises, When no опе is watching, a razor blade ix used to sure 


‘wen-on) his system, he discovers ihat the zone covering the windows 
sil not arm properly (zones will be covered in detail in later 
chapters), After а quick survey of all the window foil, he figures that 
system must be malfunctioning, and decides to arm every zone 
‘cept the windows, and to сай а repairman first thing in the morning 
this occurs, the window containing the cut foil will remain 
guarded all night It is conceivable that the owner could call a 
paiman that instant, but the intelligent burglar will be keeping his 
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суе out for that If the owner finds the tear, there is really not much 
he can do without the proper tools and supplies, From the burplars 
vantage point, he should be able to observe any repairs the owner is 
making on a particular window, and act accordingly 

Finally, it iı also possible that the wires going from the terminals 
to the ves of the circuit, may be jumpered (see Figure 6-2 below) 
‘They may be uncovered by removing the bricks or siding, and cutting 
through the wall board. Ifthe wires are revealed and jumpered, the 
entire window may be smashed without sounding an alam. li is 
important to remember, however, that the jumper wire must have a 
shorter overall length than that of the orginal circuit. 


Figure 6.2 
Window foit соп be defied by uncovering and fumperin the 
acit wires. 


No, window foiling is not particularly easy to bypass, but re- 
member, it is mot necessary that the burglar enter through а window 
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either, They know that a window that has just been cut is not a 
pleasant thing to craw through, and its not а terribly wise place to 
be seen crawling A large hole cut in a window just hus “burglary” 
written all over й, for any chance passer-by. There is also a good 
chance that the premises are protected by other components (namely 
preamplifiers) that will pick up оп any window activity. 
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Ultrasonic Alarm Detectors 
ААА 


We now move into the study of the next generation of alarms, the 
aren sensors. The first area sensor component we will examine is the 
ultrasonic alarm. The ultrasonic system consists of a transmitter, which 
‘mits frequency that lies above the human threshold of hearing, and 
з receiver, that monitors the incoming frequency. The entire system 
5 generally self-contained in опе unit, although occasionally one 
transmitter is used with several receivers. 

‘The sound waves that emanate from the transminer follow an 
eliptical (resembling an elongated oval) pattern, and ultimately return 
то the receiver, И those waves are somehow altered during their 
eliptical journey, the receiver will know it, and the alarm will sound. 
Therefore the theory is that if а burglar enters a guarded area, the 
ultrasonic frequency will be altered by his presence, thus alerting the 
receiver to an intrusion. The ultrasonic system is very effective, and 
the range is generally about 40-50 fet. 

Although ultrasonic, the frequency that these systems transmit is 
low, about 20-45 kHz (kiloHertz or thousand cycles per second). 
Standard АМ radio is between 535 and 1605 kHz. This makes 
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detection somewhat difficult, but not impossible. The elimination of 
possible ultrasound users is even easier. People who own pets or who 
live near а railroad or other source of loud noise are excluded from 
‘ultrasonic usage. Pets cause too many false alarms, and the ultrasound 
may be very irritating to them, since they have a higher sonic 
perception range. Loud noises crate sound waves that interfere with 
the ultrasonic waves, and create false alarms, Also ultrasound cannot 
be employed where there is а great deal of movement. Blowing drapes, 
Torced-ir heating, falling boxes, Cuckoo clocks, ec. re ай causes for 
false alarms, and generally exclude their owners from the ultrasonic 
club. 

There are several methods of ultrasonic detection. Mult-range bug 
detectors will reveal the presence of these alarms, Or, with the 
assistance of an electronics engineer, one could make a device that 
responds to frequencies between 25 and 45 ЕН. Another way isto 
purchase а multiband radio or scanner that contains these low 
frequencies, If the frequencies are scanned slowly, between the 
aforementioned parameters, an inordinate amount of static and 
interference should occur when the correct frequency is discovered 
Another way, albeit unorthodox, is to take а mouse or hamster near 
the suspected ultrasonic source, and observe their reactions. Small 
rodents detest ultrasound, and they usually make every effort to avoid 
it. (Ultrasound is what is used in those electronic pest-ridders.) 
Furthermore, there are converters available that bring the inaudible 
frequencies down to the human's audio perception level. In the 
presence of ultrasound, these converters will produce a high-pitched 
hum, Even if prior detection is impossible, professional burglars have 
‘observed that transmitters are almost always placed in the corner of 
a protected room. 

(Once ihe sensor is detected and located, what next? How does one. 
penetrat an invisible and inaudible sound barrier, in order w disarm 
it, without subjecting oneself to immediate detection? Ifa homeowner 
‘caused his ultrasonic detector to blare throughout the neighborhood, 
after coming home from work every day, he would soon get many 
‘complains from his neighbors, That is why most ultrasonic alarms, 
‘and most other alarms as well, have delay switches: They allow the 
person to enter the house, and disarm the system before the alarm pocs 
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off, t also allows him to апа it, and then leave before i begins 
monitoring, This type usually has a simple on/off swilch on te back, 
nd il a burglar reaches it before the thirty seconds expire, the sytem 
боса. know be irt the homeowner. This type is usually a desktop 
model, and usually has an clerical oue atached 1o itso that a lamp 
тау be made to соте on to scare the burglar, (I've also seen а tape 
recorder plugged into it which has a recorded message that says “What 
Фе hell was that!” when the guarde are is violated.) 


Because of their simple on/off switch, these are obviously the 
easiest о bypass, but there are some that are а bit more dificult. They 
are offen disguised as а wall outlet, HiFi speaker, book, or are more 
conspicuously located on the wall (see Figure 7-1 above). They too 
have delay mechanisms, but only the book and speaker types have 
simple on/off switches, The wall and outlet varieties are usually part 
ofa larger, centralized system, and can only be shut off at the control 
panel. The problem of the book/speaker type then, is simply 
recognition, The speaker type will be recognized because Hi-Fi’ have 
эп even number of speakers, and а third or fifth speaker should stand 
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‘out Also, if a speaker is standing alone, with no accompanying stereo, 
it а беш giveaway for thieves. The book type is more dificult о 
locate when many books are in the room, but it will be a rather thick 
volume with either two twin circles or squares (iransmitler and re- 
ceiver) on the binding. The name will also be of a generic nature, 
ruber than а “brand rame" publisher. 

‘Therefore, the burglar’s primary difficulty lies in defeating the outlet 
and wall-mounted types, There are several techniques that, when used 
together, enhance the probability of succes tremendously. If one has 
prior acces to the protected area while the system is disarmed, success 
їп defeating this system В almost guaranteed. А burglar may lower the 
sensitivity to zero, fil the entire apparatus with aerosol styrofoam, or, 
if no one is around, cut through the drywall, loce bare, and jumper 
any wires that may be found. IF one does not have prior acces, he 
sill has a few options at his disposal. 


While the owner is away, one may rap the windows violealy to 
create an alarm, and if this is done daily, the neighbors will eventually 
fell him that they are tired of hearing his alarm blast through the 
neighborhood every day. Believing his sensitivity is too high, he will 
usually lower it to compensate for the “mysterious” outside noises, 
After this is done, the burglar enters wearing a heavy oversized coat, 
or even a rug, if posible. The more sound-absorbing material а bur- 
lar can don, the safer hell be. The lage coat or rug absorbs rather 
than alters the sound frequencies, and the system's efficiency is com- 
promised considerably. If the walls are covered with rugs, draperies, 
or tapestries, the effect is multiplied. But absorbing some of the sound 
38 not enough, for the burglar must move super-slow. If the burglar 
‘must traverse а monitored area of twenty fet, he may spend at least 
ten minutes crossing it, The object here isto move so slowly that the 
frequency remains undisturbed by the burgars motion, Some ul- 
‘rasonie units are hidden behind wallpaper or plaster, but this cuts 
hei effectiveness by at least 25%. IF the ultrasound unis are installed 
їп that manner, they become so unresponsive, the above methods 
become all the more efficacious, 

‘There is one last remote, yet viable, technique for circumventing 
‘this type of component. If one discovers the exact operating frequency 
‘of the unit, he could, theoretically at least, get an ultrasonic transducer 
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ofthe same frequency, and stick it in front of the receiving unit. The 
‘whole monitored area could be violated because the receiver would. 
constantly be receiving what the transmitter was transmitting. Ive 
never seen this done before, but it is a posibility. 


Photoelectric Alarms 
AAA AAA AAA, 


‘The photoelectric alarm, or "electric eye,” ё а fairly common alarm 
component today, and like the ultrasonic unit, it consists of a 
transmitter and receiver. The transmitter sends light to the receiver, 
and if the beam is interrupted momentarily, the receiver recognizes it 
and sounds the alarm. The electric eye principle originated, as did 
‘many other security products, from the military. During World War 
П, the army used electric eyes on rockets to guide them to airplanes, 
‘This was soon abandoned, since they were also attracted to seagulls, 
bee swarms, or anything else that blocked their view of the sun. 

‘The photoelectric unit may be a transmitter and receiver that op- 
pose each other (ee Figure 8-1 on page 44) ot the transmitter and 
receiver may be housed in one unit, while utilizing a reflector at thc 
other end of the room (see Figure 8-2 on разе 44). The old type of 
‘uni, which is still used in some places, uses ordinary white lig. These 
are simply defeated by shining a flashlight into the receiver, во that 
A confederate may pass right through the beam. This type is easily 
detected, especially at night, because the light is plainly visible. 
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Even though the newer models use invisible light, they ше still 
terribly easy to bypass. They are placed in front of doors, windows, 
ог in Tong hallways, іп an attempt to catch passerbys, The inherent 
disadvantage of photoelectric sensors is that they are easly seen. 
Although sometimes disguised as wall receptacles, they are almost 
always in plain view, and this fact alone aids in circumvention, 

‘The modem electric eyes use a beam of Ultra-Violet or Infra-Red 
light. Anyone сап buy, from a science supply company, filters that 
allow them to view UV or IR light. The invisible light is now visible, 
and may be easily avoided. Trying to shine a beam of UV or IR light 
into the receiver may work, but ће higher-tech models use a pulsed- 
beam. The receiver will be programmed to the transmit’ frequency, 
and any deviation will result in an alarm. If one has acces to the 
premises beforehand, he can kick and break the receiver, causing it 
to malfunction, and causing the owner to shunt that zone before 
arming the system. 

‘There may be cases where the component uses laser light, instead. 
of Ultra-Violet or Infra-Red. This is easily stepped over, ducked under, 
ог otherwise avoided, provided there is not ап entire network of lasers 
‘hat form an impassable grid. This would only be utilized in a very 
high-security situation, but since it does occur, burglars have dis 
covered at least two ways in which it may be surmounted. First, а 
mirror system could be designed that provides a doorway for the 
burglar. The mirrors must be precisely 45°, and since the apparatus 
is constructed on the spot, careful planning must go into its design. 
‘The viability of the next technique depends greatly on the cir- 
‘cumstances involved, If there is a hiding place near the laser-grid, one 
‘can walk right through the grid, and then kide. The burglar then re- 
leases a bird that he has brought with him. Afr the alarm sounds, 
and а guard investigates, he will see the bird near the alarm, He may 
‘wonder how it got there, but be will automatically assume that it was 
the bird that passed through the beams. It should be obvious to the 
reader that this technique may have applications in other areas of 
alarm bypassing as well. The laser grid system will certainly not be 
‘encountered very often, so а burglar with UV and IR filters may be 
fairly certain that ће is safe бот detection by photoelectric alarms. 
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1f the burglar cannot obtain a filter t view Ultt- Violet light, an 
inexpensive but accurate UV detector is currently available where 
sunbathing products аге sold. Iis intended purpose is 10 warn the 
sunbather when an inordinate amount of UV energy is detected. 

The Infra-Red mentioned above is of the active variety, which 
means it emits Infra-Red light, and is not to be confused with passive 
Infra-Red, which is the subject of the next chapter 


Receiver 


Transmitters - 


Figure i 
An outdoor photoelectric alarm sistem. 


‘Some companies also use photoelectric sensors out of doors. These 
devices (see Figure 8-3 above) are placed far apart and are used to 
monitor the area between them. They are detected and bypassed in 
the same manner as described above, but they also have an automatic 
shut-off mechanism that may be of interest. At dawn, dusk, or during 
an extremely foggy morning, these devices shut themselves off to avoid 
possible false alarms. This also allows an observant burglar to slip past 
them at dawn or dusk, or to manufacture "fog" if necessary. 
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Passive Infra-Red Alarms 
е 


Passive Infra-Red alarms, or РІКУ, are so called because they do 
not emit Infra-Red energy, but merely detect changes in й, A PIR 
probes its monitoring area, and if any changes are detected in Infr- 
Red energy (heat) it sounds an alarm. A PIR records the ambier 
room temperature so it will notice any sudden change, such as that 
produced by a human body. Slow temperature changes, such as 
‘thermostatically controlled heating systems, will not interfere with the 
PIR's duties. The PIR is often called а thermal detector, however such 
heat detectors are used primarily for fire prevention. The PIR is 
immediately recognizable (see Figure 9-1, page 48), due to its 
common design and dark-red lens. They are very common in 
museums, banks, and other places where high-security is desired. 

The very fact that a PIR is passive, disallows easy detection. The 
burglar must rely solely on his observations for the recognition of a 
PIR system. Due to the nature of а PIR, they are usually placed in 
а very conspicuous location, such asin the corner of a room. The bad 
news for the burglar is that PIR's have vandal-proof germanium 
lenses, are tamper-proof, and cannot be jumpered reliably. Further- 
more, the range of the PIR can be 70 feet or more, although a PIR's 
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probing patter usually only monitors an area of about 20 fet square. 
(Gee Figure 9-2 on page 49), 


Figure 9-1 
A high-security, Passive Infrae alarm. The design is easily 
петле 


As reliable as they are, PIR, as you've probably guessed, are 
defeatable, Although they are generally undetectable, large-pet owners 
are immediately eliminated fom the Ша of posible PIR usen. Wi 
ther recent proliferation mo the residential market, burglars have 
Jared o anticipate а PIR system. Some are sold over-he-counter, 
although a great many are professionally installed, Therefore, one 
means of deecon would be о se whether or not the alarm com- 
pany's window decal was present Im the movies, burglars would 
Fount a transmiting TV cames опа remote controlled x, and drive 
it around inside the building looking for PR. Ви in real if, the 
хма of other components would certainly disallow that- 

Earlier, cid that PR detect rapid changes in temperature, I have 
valle, albeit slowly, directly opto à PIR, and have not se it of 
My movement wat s0 dow thatthe PIR adjusted to ic slight 
diferene їп ambient temperature that ту body was creating, Even 
ita PAR system з ona sent alarm (as discussed in Part I), one 
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immediately knows whether or not he is detected. АП modem PIR'« 
have a tiny red LED (light-emitting diode) that lights when the burglar 
Causes the internal switch to close. Although I have walked up to а 
PIR, it took me four or five times to get it right, therefore just walking 
slowly is not enough. АЙА, 


Usually located in a comer a PIR can have а range of 70 feet 
or mare although tt usually monitors an crea of 20 fel square 


‘The greater the distance between room temperature and the 
temperature of the source of violation, the more efficiently the PIR 
will work. Аз the gap between room temperature and the temperature 
of the violator narrows, the efficiency of the PIR decreases respec- 
tively, Therefore, since ош bodies maintain a constant temperature of 
98.67 а PIR in а room with a temperature around 100° will never 
notice you walking through the room. The burglar then wonders: how 
can I heat and maintain а room or building at near body temperature? 
One way is to get to the thermostat and tum it on full Bast. Another 
way ё 1o, if posible, make a hole into the room or building, and 
introduce а large space-bestr It should be at least 350,000 BTU’ so 
that it can produce the required heat If t blows directly ito the path 
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of the PIR unit, the alarm will sound. The heat must be red 
gradually, or te thief defeats his own purpose 

‘Mylar is а thin, metallic, plasticlike material that has а very 
‘interesting characteristic, When worn, it allows very little body heat 
по escape. TE a sit, with a hood, was made of this material, only a 
small amount of heat wouid reine from the burglar, and the chance 
Of detection would be lowered. 

If one raised the temperature of the room to 80°-100°, wore a suit 
of Mylar, and walked very slowly, he would have a very good chance 
© escaping detection. He may also play the same game described in 
‘Chapter 7, s0 that the owner will reduce the sensitivity. If prior aon 
can be gained to a PIR-protected area, a layer of modeling clay сап 
фе spread over the PIR lens to profoundly reduce its sensitivity. The 
clay may have to be covered with a phony lens to prevent detection. 
Alko, if one ge to the PIR without sein it ofl, a piece of heavy 
cardboard cam be attached to the front of the les. А PIR does not 
Proe he et anges inc above, below f ort е immediate 
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Microwave Systems 
ААА 


The Microwave alarm system is another transmitter/receiver 
motion detector, and is unquestionably the most dificult to suc- 
cessfully bypass. The system emits à beam of ultra-high RF (Radio 
Frequency) energy, generally 10525 GHz, and detects intruders by 
observing any change in that RF energy. Microwave systems are 
extremely versatile in that one unit may be used to monitor an 80 by 
#0 room or a 10 by 300 hallway. 

‘The primary disadvantage of a microwave system is that it has a 
propensity to penetrate the boundaries of the building it is protecting. 
In other words, microwave energy that is used to guard a busines 
sometimes reaches out into the parking lot, which understandably 
causes many false alarms, 

‘The detection of microwaves is actually very casy. The frequency 
they use, 10525 ОН», is approximately that of police radar. Hence, 
when you are near а microwave alarm system, » superbccrodync 
‘dar detector will sound. The close resemblance between microwaves 
ond radar has prompted people to call these "radar systems" but that 
is technically inaccurate. 
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nce detected, quite frankly, there is not much one can do o by- 
pass a microwave alarm in is capacity as a single component. 
However, they are almost always рал ol a larger, centralized system 
that may be defeated. There are some possibilities, however, for the 
‘determined burglar, but these depend greatly on the circumstances. 
For example, microwaves will m penetrate meni. И one had prior 
acces o the building being guarded, be could arrange metal objects 
(ling cabinets, desks, ec) so that he could reach his destination 
undetected. Another method that may work would be for the thief to 
move very slowly. Microwave systems detect movement if it proceeds 
at more than two inches per second. That В indeed slow, but suppose. 
‘one could conceivably move slower, It is very dificult for the alarm 
"owner to know exactly every nook and cranny that his alarm 
monitors, and even more dificult 10 adjust it exactly as he wants it. 
This may allow someone to crawl very low on the floor, or very tight 
against a Wal, and escape detection. 

When a burglar knows he is to encounter a microwave system, he 
usually expects to silence the annunciator (if local), or bypass the 
entre system (if monitored), As this goes to press, microwave systems 
ме sill uncommon Tor residential use, although they do exist 
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‘The components well cover in this chapter have been labeled 
“raps,” because their only asset in burglary detection is their incon- 
spicuousnes. If located, they are easily avoided or bypassed, so they 
arc primarily targeted at the amateur and inexperienced. The primary 
‘concern fr the thief then, is the location and recognition of the trap. 
Every alarm system is, in а sense, a trap, but what sets the following 
‘components apart is the fact that they are so easily avoided if they are 
simply recognized first. 

The traps that а thief may encounter include the proximity switch, 
‘the contact mat, plunger switches, lacing wires, elas-break detectors, 
Seismic detectors, and trip wires. Neary all of these are exclusively 
usod commercially, yet some homeowners have incorporated them 
into their system as well. 

YE you've ever seen those lamps and appliances that tur on and off 
bby merely touching them, then you've seen the principle behind the 
proximity switch. These devices set up a small field that detects the 
presence of the slight electrical charge in the human body. They are 
used only on metal objects, such as fling cabinets, and they crente a 
barrier of up to two feet around the object. More often, however, the 
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sensitivity is set to about 9-10 inches, to decrease the chances of false 
alarm. 

Proximity switches are easly noticed, because any metal object 
being monitored will be placed on "insulation blocks.” These will be 
‘ceramic, concrete, or some similar material that keeps the safe, fling 
cabinet, desk, ez ungrounded. One may simply avoid coming into 
‘contact with them, or he may resort to other methods if he must get 
deser, to manipulate a safe, for example. A long, non-conductive 
‘ripping device can be constructed (see Figure 11-1) to push, pull, ог 
апп anything that is necessary, It can be made of plastic, glass or 
anything non-conductive. 


ڪڪ ج 


Figure 11-1 
Proximity swiehes can he circumvented by using a long, non- 
conducive gripping device 10 manipulate provced objects 


Another irap i the contact mat. They are usually located un- 
детей the carpeting in front of doors and windows, on staircases, 
and down long hallways. A typical mat consists of opposing contacts 
that moct and close the circuit when pressure is applied. Contact mats 
‘ome in standard rolls that are 30" wide. 

They are often difficult to spot although their tell-tale outline under 
э rag or carpet is sometimes evident Burglar avoid walking directly 
in front of doors and windows, and walk against а wall when tm 
ening a hallway that is over thirty inches wide, When going up stairs, 
фе ё especially careful o walk on the edges of the steps, instead of 
оп the fat surfaces that may contain mats. 

M he locates а mat that is too large to avoid, he may simply cut 
one of the wires leading to he rest of the circuit. In most cases, this 
haphazard method of bypassing would almost certainly sound an 
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alarm, but the contact mat is unique in that it is а normally open 
switch Therefore, if one of the wires is cut, it will remain an open 
witch, even if walked upon. The ultra-paranois thief may “walk the 
walls” using the spiked boots that tclephonc-pole climbers use, and 
avoid every contact mat possible. 

Plunger switches are sometimes hidden between the door and its 
frame (see Figure 11-2), o that the opening of the door also opens 
the switch. They are rarely used when magnetic contact switches are 
in operation, These switches are also sometimes used behind paintings 
ог under statues. They are simply spring-loaded, and if the presure 
is taken ff the plunger, the switch opens. 


Nx 
bl 


Figure 11-2 
Spring loaded plunger switches activate the alarm when the 
Plunger pops oni 


this switch is easy if one has prior aces to the location, 
but very dificult if onc doesn. The most common method в to just 
assume і there, although one may keep in mind that 

installers prefer magnetic switches to plunger switches. ТО bypass it, 
one may get to the wires from the outside; and jumper hem. Or, he 
may cut through the door, or even tape the plunger switch closed 
during the day, After the door is opened slightly, one may even reach 
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in between the door and frame, to keep the switch depressed. For 
paintings and statues, the best method is to slip а piece of sheet metal 
between it and the base or wall, so that the switch remains closed after 
the goods have been lifted, 


Two traps that are best avoided are the glass-break detector, and 
‘the wie-lacing trap. The glas-break detector is the litle round stick- 
‘om switch located at the base of windows. Therefore, it is easily seen, 
‘but dificult to bypass. One could make а hole in the window with 
a propane torch, and jumper the wires, but it isso sensitive, it may 
pick up on this activity. One could also beat the window violently and 
cause а fake alarm every day, so that the owner will eventually 
become so frustrated be removes it. Otherwise, burglars avoid the 
window that has one of these on i. Wie lacing proposes an interesting 
problem as well. It is usually & wire grid in front of a window, 
‘ventilation shaft, or other small entry-way. The wires are intercon- 
nected in such а way that they must Бе cut or broken to get by them, 
and this of course will sound an alarm. Often screens in high-security 
storm doors are made of thin wire that cannot be successfully cut 
‘without tripping a switch. Skylight are also laced with very thin wire 
that breaks with any provocation. Jumpering this уре is not common, 
because one never knows exactly where to jumper it. The sereen type 
may be detected with a multimeter and the regular type of lacing is 
Plainly visible, so avoidance is not very dificult. 


Seismic detectors are very expensive and are, accordingly, reserved 
for high-security needs. Seismic sensors are completely passive, 
therefore there are no detectable emissions that signify their presence, 
The system consists of a main procesor, and any number of individual 
sensors, ай of which are buried underground. The information is then 
sent (by wire or radio) to the control panel. 

The seismic sensor is programmed exclusively for the recognition 
of the distinct “signature” of human footfall. One could traverse a 
questionable area Бу hovercraft, but that is hardly practical. Walking 
‘ery softly or crawling to the target destination will result in a seismic 
activity that is not recognized by the sensors, therefore the processor 
will ignore й, The procesors are programmed in this manner so that 
an alarm will not sound every time а squirrel, dog, or bird walks 
through the ares. Seismic detectors are used primarily to guard road- 
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ways, so thieves who suspect their presence, enter in an unorthodox 
fashion. Seismic procesors are always marked, so that they can be 
easily located for repairs, If one can find and reach tbe marker without 
tection, one can dig to й, and shut it ой. Metal detectors are also 
used 10 locate the processor or the individual sensors, Incidentally, 
seismic detectors are almost never used residentially. 

‘The final trap is the simple trip wire. Once used in the jungles of 
Viet Nam, it has found its way into the security market. These are used 
10 cover vast expanses, such as а factory warehouse or large show 

The trip wire itself а thin string or wire, much like fishing line, 
amd is stached 10 а switching mechanism (see Figure 11-3) on one 
end, and is permanently mounted to the wall on the other. When the 
wire is stepped on or pulled, by attempting (o cross it, the block is 
pulled from between the switch, thus closing it. The trip wire is used 
in low risk applications, because of the fact that it is easly defeated. 


we Wall 
‘Switch Mount 


Figure 11-3 
A trip wire тиш from an alarm circuit to û wall anchor. 


Quite simply, tip wires can just be stepped over or otherwise 
avoided, if they are seen. Noticing them should be easy in daylight, 
‘but а bit more difficult in darkened premises. Spray paint that con- 
irasts against the floor can be used to locate them, for a litle paint 
will stick to the wire, but diffuse on the floor. Upon locating these 
traps, most thieves prefer to cut the line instead of stepping over it, 
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їп case they're forced to leave in a hurry. A strong flashlight shone 
from the floor may alo be used to reveal upcoming trip wires. BY the 
way, trip wires are usually located anywhere from 2^ to 12" from the 
боо. 
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The Canine Alarm System 
ААА 


Though technically not an alum, а guard dog is an integral part 
of many security systems. The guard dog is hardly an efficient alarm 
component, but it does offer some of the best criminal deterrence that 
money cen buy, For it takes а great deal of determination for a burglar 
to proceed when faced with a snarling attack dog. We will be pri- 
marily concemed inthis chapter with how intruders subdue and/or 
minate guard dogs. Without preparation, this is nearly impossible, 
but with proper planning and precautions, it becomes quite easy. 
There are two types of dogs that a burglar will encounter, The fist 
is the pet, who is kept for personal reasons, rather than burglary pro- 
tection, The second уре is the trained attack dog, who wants nothing 
‘more than іо eat an intruder alive, Since dogs are extremely territorial 
n nature, the family pet may sometimes seem ss ferocious as the killer 
dogs, but most often they are more bark than bitz. Personally, I would 
find i very ficult to use the same ruthlessness on а Cocker Spaniel 
as 1 would with a tained Doberman, but burglars have no reserva- 
tions about resorting to these measures to achieve their endi, 
Although there are only the two categories of dogs, there are four 
ways in which they may be encountered. First, and most common, 
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is the outdoor pet. He is usually chained or tied to his doghouse, and 
the опу problem he presents is his non-stop barking, Another 
commonly cea type is the indoor pet, He may attack or bark his ead 
ой, but usall he will be friendly afer a few soft words, The next 
"ost common, and also next in line in regards to danger, is the guard 
Чо. He в шай in junkyard, caros, or anywhere else where anyone 
on the premises would be an intruder. He is generally kept behind a 
large chainlink fence, to protect the public at large from him. Finally, 
there isthe aac dog, which is sperially trained to kill anyone who 
enters his domain. They often run loose on lae estates after dark, 
and protect it with immense loyalty and vigor, They usually work in 
teams and they are often upon the intruder before he knows What is 
happening 

Depending on the type encountered, there are different methods for 
айд; with the various dogs For the first type, the outdoor dog, one 
тау employ a number of silencing techniques Thee ме the obvious 
methods such as simply shooting him or giving him poisoned meat, 
but there are also three more humane methods, Some thieves take two 
dogs wit ther, а male and female, when they attempt to make a 
score The theory is and it seems true, that a dog would rather carouse 
with a member of the opposite ex than worry about any intruders. 
‘Also, CAPSHUR is a company that makes tranquilizers and guns that 
will knock a dog unconscious for a few hours, They sell to the public, 
if provided wit a good excuse. To silence the outdoor dog for а small 
period of time, one may also use the old mace/stun gun tick. This 
emails temporarily blinding the dog wit mace, or similar irritant, and 
then using а stun gun to knock him down (and quit often uncon- 
scious) The adventurous type may then attempt io muzzle him, but 
that sno usually necessary. The above methods wor for the indoor 
dog as well, but he may also be simply locked in а closet or bathroom. 

The guard dog behind the fence can also Бе dealt with in a number 
of ways. A омуш, which is available от many commercial sup- 
ріс, can be used with poison darts to drop the meanest of them. The 
фаш dog is genera trained not to eat anything given to Bim by 
Stranger, but sometimes be may let a juicy steak get the best of him, 
and T've ako seen а guard dog fed to passivity with Polish sausages, 
Ii were to contain а fast-acting poison, such as ошодой, а simple 
hot dog would have the seme lethality as a rifle slug. 
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The attack dog wants to kill, and he is very good at his job, but 
he is ultimately stoppabie, He can be shot, blowguaned, or trangul- 
ed, but that takes а good aim, not 0 mention steady nerves, A large 
Capture net may be carried, and thrown onto an approaching dog, but 
this quickly becomes futile when one is being approached by more 
than one. A more effective means of eliminating several dogs at once 
{sto сапу à squir-botle thet has been filled with formaldehyde or 
ydrocyanic acid (se Poor Man's James Bond in the Bibliography). 
If either is sprayed into the face of the dogs, they will be effectively 
denied any further attack, The formaldehyde irritates the dog tre- 
mendously, but the hydrocyunic acid will instantly kill it. Another 
interesting method of canine control is the high-frequency Dog 
‘Chaser, available from Electronics for Industry, Inc. of Miami. The 
high-frequency that it emits, creates extreme discomfort for any dog, 
and the closer he gets, the more painful it becomes, While the Dox 
‘Chaser шй in itself may sulfcentl insulate one from canine attack, 
itis generally used only as insurance against the possibility that the 
burglar’ other methods wil fi 
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‘The Local Alarm Panel 
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Below is а drawing of a typical key-operated control panel (sce 
Figure 13-1). Note that it is a very basic panel, and doesn't include 
such accesories as а panic button or zone control. Tt does, however, 
have an entry/exit delay tat allows one to enter ог leave before the 
alarm sounds. 


Lr 
А tial key epeated alarm conl panel. 


‘The the possible settings for this particular panel are OFF, ON, 
and DELAY ON. OFF shuts the entire system down, and allows апу 
component, perimeter alarm of mation detector, to be violated with 
mo й effects: ON arms the system immediately, and is generally used 
‘when one is ready for bed. DELAY ON arms the system aer about 
ıa thirty second delay, which allows one to leave and lock the door. 
Jt also allows one io enter and disarm the system before the alarm 
sounds. Everyone puts their system on DELAY ON (although the 
wording may be different from panel to panel), when they leave home. 
Homeowners generally set the delay at thirty seconds, but it may range 
боп fifteen to sity, depending on the location of the panel. When 
{system is new, some homeowners se the delay time on fiteen 
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seconds, But when they walk in one afternoon with two bags of 
groceries fumbling around for the alarm key, the time wil expire, he 
Alarm will go of and they wil then set the delay for about thirty 
seconds. 

All one need to bypass this type of pane 8 the key. But if that 
ist posible, tere are other alternatives. Now is as good a time as 
amy th discus the proliferation of loksmithing knowledge. Anyone 
‘who has the slightest inclination towards crime has a staggering 
amount of locksmithing knowledge at his disposal. There are many 
books on the market that tell you how to pick loci, and even some 
that show you how to make your own tools A potential thief may 
even ше an anonymous handon course in locksmithing from any 
of the correspondence schools that offer such training. Not only wil 
they learn to pick all common locks, but the tools are supplied as well. 
‘Another beri. of taking tbe course that tbey have the privilege of 
buying professional lock equipment through legitimate suppliers, and 
those suppliers are ofen the only sources of many products. With 
locksmithing knowledge, one may abo be able to make a duplicate 
key for the alarm, afier merely glancing at the original (on the owner's 
key chain at a gas station, for example) Айег taking the Foley-Belsaw 
Insite’ Jocksmithing course, s person can open а lock, without a 
Key, almost as fast as he can wilh a key. The security of the panel may 
e increased by using a Key switch of the tubular variety, tbe type seen 
most offen on vending machines. While somewhat dificil to pick, 
locksmith suppliers sell а tubular lock saw that will cut the Jock, and 
allow one to open it, їп à matier of seconds. Every variety of contol 
panel, beyond the “El Cheapo” type, has a tamper swich behind the 
Panel door. Any attempt at geting о the inside of the panel will 
Sulomaticlly sound an alarm, and there is really not much a thief 
could do if he were to get there anyway. Therefore, the only way to 
Scoessfully shut down the panel, is via the key switch, 

Assuming one can pick, or otherwise compromise the lock, the 
dilicity lies in finding the panel upon entry. It may be on the wall 
ear the door, or hidden in a closet А Ы of night-ime reconnaisance 
‘will reveal whether ог not the person entering has to make a dash 
towards a closet, or if he remains near the door. Upon entering, most 
control panel start beeping to remind you that the thirty second delay 


(66 TECHNIQUES OF BURGLAR ALARM BYPASSING 


has begun. The beeping also leads а burglar right to the panel. The 
panel must be nearby, to allow the homeowner to get to it in time, 
зоа burglar does a systematic but rapid check of the most logical panel 
placement, With a good pretext, thieves may even gain prior access 
to the premises and, with any Tuck, find it. 

‘The same techniques for location apply to the next type of alarm 
panel, ће key-pad variety. The key-pad offers much more security and 
ойев more features than the regular key type. Following is a fairly 
typical version of the key-pad panel (se Figure 13-2). Note that this 
‘panel offers many options, such as a panic switch for emergencies, the 
ability to “shunt” out certain zones, and the ability to periodically test 
the system. But aside from the accessories, the only real difference 
between this and the last type is that you ше a key-pad instead of a 
key. A three or four digit code is entered via the keypad which arms 
or disarms the system. The same code is used for both arming and 
disarming, although different people may have different codes. 


Figure 132 
A more complicated alarm conirol pane, operated hy a numerical 
keypad. 
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No amount of locksmithing knowledge will help a burglar tum this 
variety ой, but there ме many other ways to get the disarming code 
Depending on the circumstances, it may be possible 10 get the code 
through surveillance. Also, the owner's manual for many do-it- 
yourself burglar alarms has a place in the back to write the alarm code. 
Many people do write it down and stuff it in à drawer somewhere, 
and that sometimes offers а dangerous possibility. ula have also 
been known to just go to the panel and start with 001,002, 003, ele, 
until they hit the right one. This is time consuming, and the alarm 
would certainly sound, but when they finaly hit the right number, 
they could call the neighbors and say, “Neighbor, this is Johnson up 
the set, that was jst me. No need to сай the cops” Some of the 
newer models, however, опу allow two wrong codes to be entered 
before temporary shuning down. After the two minute delay is up, 
‘one can enter two more codes, but if they are wrong, the system shuts 
down for wo more minutes, Theoretically, i is stil! posible to come 
up with the right code ia this manner, but going from 001 to 999 
‘would take at least 16 hours, and going rom 0001 1o 9999 would 
take days 

А very reliable way to get the code, is the UV ink method 
Moments before the home or business owner arrives, a large quantity 
‘of Ulta-Vilet ink (available (rom scientific suppliers) is dsibued 
оп the door knob. When he goes to disarm the system, the residual 
nl on his and will remain to some degree on the keypad, and this 
саа шег be seen under an Ultra-Violet lamp. It would then be a very 
"imple mater 10 deduce tbe posible combinations of the code. This 
technique always works for left-handed homeowners, since they use 
ther left hand to both tum the door knab, and disarm the system. But 
right-handed people are a bit diferent. The right-handed person some- 
times tums door knob with his lef hand, then punches the disarming 
code with his right. Burglars have conquered this problem by 
sprinkling, with Ultra Violet ink, a package tbat he bas to pick up with 
his righthand. The package may be in the form of a briefcase, box, 
abbas, or anything, but is lid in such a manner, that a person 
‘would be obliged to ase his right hand to pick it up. 
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One last technique шей for discovering the code works only when 
‘one code governs the entire system. The control panel is dusted with 
detectives fingerprint kit, and the latent prints should be revealed 
‘on the numbers that make up the code. If two or more codes are used 
ina house or business, the dusting will reveal every digit of every code 
‘sed, and therefore this technique would probably be futile, 
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Miscellaneous 
Local Alarm Information 
JARA ARARAT 


Before we begin the study of monitored alarm systems, there are 
a few loose ends that need tying, Let me reiterate that there are threo 
major ways to defeat the simple local alarm. These include silencing 
‘the annunciator, bypassing the individual component, and shutting 
down the whole system, Of course, a combination of all three is even 
more effective, as professionals know that when bypassing alarms, 
‘there is no such thing as over 

The first two weeks ater a new alarm system is installed, the home 
ог business owner will accidently set it off many times. During this 
period, the neighbors or surrounding businessmen will dismiss the 
alarm signals as false alarms. Obviously, this is а wonderful time for 
the burglar о strike. (Of course, the best time is before they even 
install the alarm system.) 

Burglars also send away for the literature that the alarm companies 
distribute. The literature often gives technical information and usually 
has photographs of the different alarm panels. Under some cir- 
cumstances, this may aid in defeating the control panel, If the 
homeowner displays a “This Property Protected by XYZ Alarms" 
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sticker, the XYZ Co, will be pumped for all the information they can 
deliver 

‘Another topic that belongs in the miscellaneous category is the 
proliferation of the "Dead Man Trap.” While expressly illegal, some 
do-it-yourself types set up a contraption that is meant to maim or kill 
эп intruder, rather than catch him. This may be a loaded gun aimed 
ata window, a jewelry box that blows up in the face of anyone who 
‘opens it ог а safe that is wired to deliver 50,000 volts to anyone who 
touches it. The homeowner who installs such a system had better be 
prepared to lose more in court than from a burglary. There are many 
cases on record where an injured burglar actually sued and recovered 
thousands of dollars from the homeowner he was burglarizing. Aside 
from being sued by would-be burglars, there are just too many dangers 
involved to consider this type of installation as actual protection. 
Finally, it may have occurred to the reader that when one attempts 
o bypass component A, thee is very good chance that component 
B will detect that activity. For example, if thief attempts to bypass 
а magnetic switch by cutting a hole in the door with a chainsaw, it 
® likely that an ultrasonic detector will pick up this disturbance, and 
create an alarm. Or, if one attempts to avoid window foil by cutting 
a hole in the window, the glass may fall onto а contact mat, and sound 
the alarm anyway. That is why most professionals only bypass the 
components necessary to reach the control panel, where they attempt 
то shut off the entire system, This allows them to operate on the con- 
‘rol panel, without having 0 worry about any time delay mechanism. 
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Monitored Alarm Bypassing 


Aen 


In Рап Three, we will discus: the variety of systems that are 
monitored by a central sation. Rather than announcing an intrusion. 
(via bell, siren, ic.) this type of system silently sends a signal to the 
alarm company where people are monitoring for intrusions. This type 
of system, therefore, is often referred lo as а “silent alarm.” Although 
опе can obtain his objective by bypassing the individual components 
‘ofa local alarm system, when bypasing this type, one must shut off 
the entire system fo be succesful. The employees of the central station 
are led to believe that the alarm is being shut off by authorized 
personnel. Therefore, burglars are not only aware of the techniques 
‘of bypassing this system, but also of the psychological maneuvers that 
ate necessary as well. 
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The Central Station 


| 


yan 
potential targets for burglary, had alarm systems that were tied in 
rectly to the local police station. As the use of burglar alarms in- 
creased, the police department began turning down more and more 
requests to be “hooked-up.” As а result, there became a demand for 
central stations, or companies whose specialty it was to simply 
monitor burglar alarms. Most police departments wil sill allow banks 
and large jewelry stores а direct link to the police station, but as a rule, 
homeowners are excluded. As the demand for security has risen, many 
guard agencies and burglar alarm installers have begun to offer cen- 
tralized monitoring as an option for their clients. 

‘When а silent alarm is installed, it is connected by a dedicated tele- 
‘phone line to the central station. In the event of an intrusion, the con- 
"nol panel on the premises being monitored calls up the central station 
and gives ап electronic message to the answering computer, It tells the 
computer сау which witch or senior bas been volti and the 
‘compute then tells the operator what has happened. For example, 
‘burglar entered through a broken window, the panel would call the 
Compal op tnd tel tat мше foe window, hs bon 


E 
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broken. The operator would then see on his computer sereen thas 
Аса. #1234, the Johnson residence, has had zone 4, the window 
foiling on the Iving room window, Violated. As the thief proprezed 
"rough the house, the pane! would ош the computer for every sensor 
that was violated. The operator may then receive 1234-17, meaning 
that zone 17, а Passive Infra-Red detector in the master bedroom, has 
басай someone. The operator would then be Бу sure someone 
was in the house, so he would have thre options. He may jus send 
his company’s armed guards to the scene, call 911 and dispatch the 
police, or he may send both the police and the guards. (See Chapter 
19) 


When an authorized person enters through the designated entry/ 
exit door, he goes directly to the control panel, Using а key, or his 
push-button code, he shuts the system off, If he enters at а strange 
hour, he must call the central station and give them his password or 
code phrase. And so, since the system was properly disarmed, the 
central station operator then pays no more attention to that particular 
account for the rest of he night. Because of the time delay, the owner 
is able to shut it off before the panel has time to call up the central 
station's computer. This, coupled with the fact that the owner call the 
central station to give them his code, supposedly guarantees against 
fou! play. The premise here is that even if а burglar can got to the 
panel, and shut it of, be will not know the code word. I suppose the 
people who think that have never heard of bugs or telephone taps, not 
to mention laser surveillance devices, parabolic and directional 
‘microphones, or the “Oops, 1 forgot my coat last night” (which 
contained a voice-operated tape recorder) trick. The entry/exit door 
is another safeguard against illegal entry. It is designated by the owner 
st the time of installation to be the ONLY method of entrance when 
the alarm is armed. That doesnt mean that the owner always obeys 
this, but it causes the central station operator to be a bit more sus- 
Picious if someone shui off an alarm, but does not enter through it 
Since the best way to bypass a monitored alarm is to appear to be 
authorized to do so, a burglar usually does some surveillance to de- 
termine the entry/exit door 


A central station has an immense amount of control over the se- 
curity of its city. The central station keeps blueprints (containing the 
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‘alarm design) of clients’ buildings, the master codes and codewords 
for all alarms, and it sometimes even keeps a сору of their keys, It 
also knows when their clients are out of town, and how long they will 
be pone. Ideally, а сеи! station would be ап impenetrable fortes, 
‘and its employees would ай be unquestionably trustworthy, however, 
їп most cases, neither is true. Chapter 21, on Guerrilla Tactics, vil 
show how these weaknesses are exploited. 

It would greatly benefit a thief if he knew whether or not a system 
‘was monitored, and if so, by whom. Ordinarily, a security company 
риз йз sticker on the doors and windows of a monitored house. The 
thief could look through the local Yellow Pages, to determine if the 
security company was legitimate, and also to determine bow fast the 
guards could arrive. A common way that is used to determine if a. 
house is indeed monitored is to throw a rock through a window. If 
ıa bell sounds, itis more than likely local, if there is no sound, but cops 
arrive moments later, it is monitored. After a house or business has 
been determined to have a monitored system, there are several ways 
to determine the company that monitors it Let's say that the proposed 
target is Movie Rental st 716 Broadway Street. One could call every 
alarm company in the Yellow Pages, and say, “This is the police 
department, do you monitor Movie Rental on Broadway?” Usually, 
an answer will be given, but a reason for wanting to know should be 
prepared. Presumably, one company will eventually say that they do 
‘indeed monitor Movie Rental on Broadway. Another way to find out 
wbo monitors the alarm is to strike up a conversation with the 
proposed victim, and ask him to recommend a security company, A 
less risky way is to throw a rock through a window containing fil, 
ог otherwise break an alarm component, and soe who comes Ош to 
fix it The name of the company is usually written оп the service ruck 
for advertisement, but if not, the license plate is run through the DMV 
‘computer. In rural or suburban areas, one could also check the home- 
‘owner's тай for the alarm company's bill 

‘An alarm company not only monitors for intrusions, but also for 
tampering and sabotage. Cutting the telephone lines, the power lines, 
от tampering with the control panel, will bring the cops just as fast 
as breaking down the door. Although leaving the telephone off the 
hook: will prevent the alarm company from contacting the house, it 
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‘will not keep the control panel from contacting the company's 
‘computer, because it features a “line seizure” mechanism. That means 
that no паша what happens, an alarm signal will still get through to 
the central station's computer 


16 


Preamplified Microphones 


rns 


One individual component was not discussed in Part П, because it 
distinctly belongs i the section on monitored alarms. This component 
is the preampled microphone, or preamp, as it в called. Is usually 
ıa small black box that sits in а centralized location, and listens for 
anything out of e ordinary. Many companies, notably Soniirol Se- 
cant, utilize preamps in addition to regular components. When the 
system is armed, the preamplifier sends sounds (via telephone wires) 
to the central station, The preamp can pick up the slightest noise, so 
thatthe ella sounds of» burglary betray the burglar even if the 
other components do not. The preamp does not know the difference 
botween the sounds of burglary and everyday noises, зо it also sends 
barking dogs, sirens, telephone rings, and various other “harmless 
noises into the eas of he central station operator 

Although they ore sometimes detected with high-quality bug de- 
tector, itis often quite difficult to ascertain whether or not they are 
being used. However, if a thief knows (or thinks) a preamplifier is 
being used, they are quite easily overcome. И, prior to execution, one 
alls the residence or business, the ringing will continue unti the 
burglar arrives, If the burglar is very quiet, the ringing will mask the 
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noise that he is making, and the listener will be none the wiser. 
‘Similarly, a tape recording of a siren or barking dog is often used to 
«оше the same elec. 

Some security supply companies зей а sound generator or jamming 
device that nullifies bugs and other microphones, but the interference 
‘that this crentes may arouse undue suspicion, о it may not be practical 
forall circumstances. One method that is practical, however, isthe use 
oF a СВ linear, If a CB radio that is connected to а powerful linear 
(over 250 wats) is used near а preamplifier, the only thing that the 
‘operator at the central station will hear is the CB conversation. You 
‘may think that this would immediately arouse the suspicion of the 
‘operator, but actually it probably won", because it happens all the 
time. Everytime a trucker with a powerful CB radio pases by n home 
or busines with a preamp this phenomenon occurs 

Since preampliied microphones also capture the sound of an 
authorized entry, the code is usually just given aloud upon entering, 
so the operator can shut of his system. This code, then, is extremely 
азу to surreptitiously obtain, 
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‘The monitored control panel doesn't differ greatly from the local 
control panel. T is usually key operated or push-button controlled, and 
the same techniques of locksmithing and procuring the alarm codes 
apply to it. It does, however, have а few extra features that merit it 
эп individual chapter. 

А hold-up switch or panic button is usually tied into a monitored 
alarm system. Sometimes several are scattered throughout а home or 
business, and if any are pressed, it immediately sends an emergency 
signal 10 the central station. The central station is generally ordered 
not to call the premises on a hold-up alarm, but rather 1o call the 
police immediatly. There is a hold-up alarm in every bank, con- 
venience store, and liquor store in the country, although they are 
usually disguised. Some are foot-pedals, while others are а metal clip 
device with а removable banknote between the contacts. А residential 
panie button works in the same manner, although it is rarely disguised 
Many systems allow a wireless panic button to be placed by the bed, 
so that one can push it without going o the panel. 

Another feature of the monitored alarm panel is the dures code, 
А duress code disarm the system, but at the same time sends a distress 
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signal o the central station, If a thief breaks into а house while some- 
‘one is home, ће may threaten o ЫШ the homeowner if he doesn't give 
him the disarming code. The code is given to the thief, and it in fact 
docs shut the system off. What the burglar doesn't realize is that in 
five minutes the home will be surrounded with cops. This would work 
almost every time, if the security industry had not standardized their 
dures procedure, Every company that T know of advises its clients to 
add 1 to their regular code to send a distress signal For example, if 
Your regular code is 1234, and a burglar demanded the code from уоп, 
you would give him 1235. It would disarm the sytem, but also notify 
the central station that there is trouble. The problem here, is that an 
intelligent burglar could just subtract 1 from whatever code you gave 
him, and гу it first. If the system disarm after subtracting 1, then the 
code the homeowner gave was Ше trick, or dures code. I it does not 
запт after subtracting 1, the homeowner gave him the correct code. 
Either way, the burglar escapes tbe trap that was set for him. 
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Pavlov’s Dogs Effect 
AAA AAA, 


In the nineteenth century, Ivan Paviov conducted an interesting 
psychological experiment. He rang а bell every day before feeding his 
‘dogs, and eventually the mere ringing of the bell caused the dogs tn. 
‘alivate, This was the first scientific recognition of what is known to- 
day as п conditioned response, What has this got to do with alarm 
bypassing? Not much, hut the same conditioned responses have their 
use for the crafty burglar. 

cause some alarm components are very sensitive, they are often 
prone to false alarms, and, duc to mechanical failure, some com- 
ponents are more prone than others. In addition to this, there are re- 
Curing incidents, such as а loud truck that drives by а certain spot 
every evening, or a manager who always takes too much time to get 
o the panel, or many other events, that send an alarm to the sation 
every day at the same time, 

Obviously, if this goes on for any length of time, the operator will 
begin to expect it, and then to ignore i. 1 remember an alarm that 
belonged to а storage company that would come in almost every 
Aight. The first few times, we sent the police to investigate it, but soon 
‘we began sending only our armed guards. Although we repeatedly 
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sent servicemen to try and fixit, we eventually began to accept ik, and 
then ignore it You may have guessed that when they were burglarized 
‘month ltr, our company vas unable to explain (0 the owners Why 
же dd not respond to the lam. 

Ii was a textbook ease of the Paviow’s Dogs effect. The secret of 
this technique is to make а single component ring into the central 
station every night or so. Eventually, there will be so much laxity 10- 
‘wards that individual account, it can be violated, and the police will 
probably never even be tified. While the ideal situation calls for 
violating а sigle component, burglars sometimes find it necessary to 
violate more than one. This game, however, i not played as long as 
the single component game, because a much more in-depth investi- 
gation will be made by the alarm repaicmes, J is also posible to use 
the Pavlov's Dogs effect оп local alarms, by getting the neighbors and 
police tired of responding to ale alarms, but it is more effectively usod 
When the alarms are monitored. 

There is another advantage for the burglar if he causes a large num- 
ber of false alarms at a particular location. With the increasing number 
of false alarms, many police man-hours are being wasted just re- 
sponding to them. This has prompted many cities to adopt an alarm 
ordinance. The ordinance only allows а home or business owner a 
ertain number of false alarms during a thirty day period, and if that 
limit is exceeded, their alarm license will be temporarily revoked. И 
someone's license is indeed revoked, an alarm cannot be reported to 
the police during the punitory period. Obviously, if an acount s only 
one alarm away from violating the ordinance, the central station 
‘operator is going to be quite apprehensive about notifying the police 
the next time an alarm comes in. The operator will certainly not call 
911 if there is any doubt as to whether or not there s an actual in- 
trason at the locuon. You may rest assured that the professional 
burglar can quote the alarm ordinances of the cities in which he 
operates. 
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Police And Guard Responses 


МАЛАЛА 


‘Although a burglar may proceed with caution, defeat every alarm 
component in sight, and shut off the whole alarm panel, there is still 
a chance that he may make a mistake. If the mistake is insignificant, 
по one ever knows about й, and his mission comes off smoothly, but 
ifthe mistake raises the suspicion of the central station operator, it пау 
result in the dispatch of guards or police to the premises, The pro- 
fessional burglar recognizes this possibility, and often takes steps 10 
minimize the risks and dangers of getting caught. With enough plan- 
fing, not only will his mision be accomplished, but the burglar will 
also probably escape. 

Ifa burglar creates а silent alarm, or otherwise arouses the suspicion 
‘of the operator, the police, guards or both, may be sent, If the alarm 
‘company has its own mobile guards, it will dispatch them to the scene 
Via radio, This radiofrequency is easily discovered by networking with 
scanner enthusiasts, or by writing the FCC. Once the frequency is 

the burglar can listen to and follow every move of the 
ards. ЇЇ the guards are headquartered at the central station, а con- 
federate can keep the plaoe under surveillance, and watch the guards’ 
activities. If they suddenly go to their vehicles, and proceed toward 
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the place being burglarized, the confidant will notify the burglar by 
walkie talkie. If the potential take is large enough, burglars may even 
have several cars strategically placed along all posible routes that 
guards and police mus use o arrive at the scene. IF hey observe any- 
thing relevant, they will notify the burglar, They may also bug the 
central station (see Chapter 21 on Guerilla Tactics) o determine 
wheter or not the guards will be sent 

Ifa company does not have guards, or if they feel the police would 
be beter equipped to handle the situation, they may just call 911, The 
operator wil talk to the police берагоу dispatcher, and tel him 
that he has an “alarm drop” at such-and such adres. The police dis- 
patcher wil hen notify а nearby unit, by radio, that he received a call 
from XYZ Security, and that he should go check it ош, The burglar, 
who also has a scanner preset to the police frequency, has also be 
notified, and is mysteriously gone when the police arrive. The fre 
quencies of local police departments are casily obtained Пош fellow 
scanner listeners, or from the Radio Shack frequency guidebooks. 

While the above techniques will work in most cases, there may be 
times when a guard or policeman arrives, without the burglar knowing 
about it, If this occurs, i is usually during а routine neighborhood 
check, or when а policeman is stopped and divened to the scene by 
a suspicious neighbor. This, however, is so incredibly rare that the 
chances of being caught in this manner are almost пй. 

Ша burglar thinks that he as a chance of getting caught, he may 
bain authentic or counterfeit credentials and documents thal provide 
a plausible excise for his being there. Willie Sulton, the famous bank- 
robber, even went so far as to make а complet, but phony, police 
uniform to throw everyone off of his uail. This technique would 
Obviously have its uses in housebreaking as well, 

Professional burglars also know better than to hide on the premises 
to avoid capture. After the guards and police arrive, and verify an 
actus point of entry (POE), the police department wil bring out its 
K9 unit to “sniff ош" the place. Anyone hiding in the home or 
business wil be found in а mater of minutes. И seems tht thieves 
‘would rather take their chances as а moving target than 10 be a siting 
duck by hiding undera bed. If one enters in a conventional manne, 
‘sch as through the front door, he usually takes care 10 lack i behind 
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him to give the appearance that nothing has been disturbed. Ifa guard 
or policeman arrives on the scene und doesn't notice anything 
suspicious, and doesn't see anyone inside, he will usually proceed no. 
further, and write it off as a mechanical failure, Obviously, if a thief 
uses a crowbar to open a door or window, no one will think it was 
merely а false alarm. Closing and locking the door behind him also 
minimizes the risk of being caught during a routine door check, which 
is quite common in some cities 

Finally, й should be known that professional burglars are acutely 
aware that most guards are ether 18 and just out of high school, or 
‘over $0 and extremely out of shape. Either way, they ate poorly paid 
‘and extremely indifferent to their company and clients, They have no. 
inherent loyalty toward their employers, and this generally provides 
an incredible opportunity for the resourceful burglar, Its obvious that 
five thousand dollars in the hand of a $3.50 per hour security guard 
will sometimes make him look the other way for an hour or so. 
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Television Monitors 
And Auto-Dialers 


JAAN 

Closed Circuit Television (CCTV) cameras are used around the 
world to keep vigil over aras that ме potential scenes of criminal 
activity. In many cases, a guard keeps watch over several monitors, 
or the cameras are connected to VCRs so that they may be reviewed 
later. Cameras may also be connected to motion detectors, во that if 
anything а detected within the camera's field of view, it will scan for 
the intruder. The motion detector sytem is used when a guard has 
to monitor such a large number of cameras, it would be difficult to 
watch them all simultaneously. CCTVs are frequently seen in hotel 
lobbies, st bank eller windows, and other areas where the very 
presence ofthe camera deters crime. Ш reality, however, eumeras do 
very litle 1o guard against a professional burglary. 

In the movies and on television, there is a variety of methods used 
to defeat the lowly CCTV camera. Some thieves spray shaving cream 
into or tape cardboard over the lens. MacGyver simply places a mirror 
in front of the camera, and the Mission: Impossible team tap into the 
Coaxial cable, and delivers a phony picture to the Third Word guard. 
Fortunately, or unfortunately, depending on your viewpoint, it is 
never quite that simple. CCTV cameras have the uncanny ability to 
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penetrate seemingly opaque objects, therefore the shaving cream/ 
cardboard method would probably not work. A mirror placed in front 
of a lens would be a definite giveaway for an observant guard that 
something was askew. Finally, the “tapping into the coax" trick would 
involve so many trial and error adjustments that no one could get it 
right the first time, let alone convince a guard that nothing out of the 
ordinary had happened. 

The primary characteristic of a CCTV that allows for easy bypass 
i its oustanding visibility. This fact alone allows an observant thief 
to watch the scanning rate of the camera, and do his "work" during 
the periods when the camera is looking the other way. There are often 
айстр made to disguise а CCTV, but any suspicious box aimed at 
ıa sensitive area is automatically assumed о be a surveillance camer, 
Sometimes video cameras or slow-speed Super-Smm cameras are 
hidden in liquor stores and gas stations, and are turned on by a hidden 
switch or foot podal. These certainly won't deter crim, since the 
amateur criminal doesn't know they e there, nor will they apprehend 
many professional criminals, since а pro would obviously wear a mask 
‘or disguise during such ап operation. 

There are two more video surveillance devices that are practically 
useless for criminal detection. First is the phony TV camera used in 
some stores to foo! people into believing that their every move is being 
‘watched, This does deter shoplifting among amateurs, but profession- 
als know them for what they realy are. Some of these fake cameras 
‘can even scan and they may appear to be completely authentic, but 
а professional thief is more aware of current security products than 
the store owner, and has undoubtedly studied the brochure on these 
phony cameras as well, The second device that I feel is virtually useless 
for criminal detection is the sill-ftame transmitting camera. This type 
takes а still photo of an area such as а parking lot, and transmits а 
picture, through the telephone lines, to а monitor that is connected to 
the same phone line. The monitor may be anywhere in the world, 
provided there is telephone service to that area. But the monitor only 
receives а new image every minute or so, so that anything that 
transpires in the minute between one picture and the next, wil go 
unnoticed. Also, if the telephone lines to and from the monitor are 
cut, there is no more surveillance until a repair crew can get to the 
sight lo mend them. So much for security. 
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There are two more techniques for defeating the surveillance 
‘camer, and their uso depends oa the manner in which itis monitored. 
Jf the camera is connected to а videotape recorder, the leas may 
simply be covered with glob of modelling day, or any other 
moldable opaque substance. If this is done, no activity in the 
monitored area wil be captured on flm. IT the camera is being 
monitored in real ime by a guard ог policeman, an FM cxilator (the 
type sold in novelty catalogs to interfere with TV and radio 
тойс) can be altered to produce several hundred wats If this 
device is brought anywhere near а TV monitor, the picture will be 
reduced to snow and sate. 


The ашо-йшег is equally worthless in preventing professional 
burglary. The amo-dialer is a device that calls а central station or 
police department on the telephone and delivers a short pre-recorded 
‘message that there 8 a burglary in progress, There may also be ober. 
numbers listed, such as those of friends and neighbors in ease some 
ofthe other cals did not get through, Modern auto-dialers have a line- 
seing mechanism that disallows jamming the ine, by calling the 
residence prior to the housebreaking, for example. They are usally 
hidden and housed in а locked bor for added protection, but even 
ith bese safeguards, the value of the uto dira a security device, 
i practically nil. 

HE the alarm that is connected to the dialer cannot Бе bypassed, the 
telephone lines cannot be cut, and the lock on the housing cannot be 
picked, there are sl several more ways to defeat this system. Since 
Sut бш ar silent to the homeowner as well as the burglar, they 
fe panny 10 many false alarms This fact has prompted many cities 
to ban the use of audien, since so many police man-hours have 
been wasted responding to them. In the cities that do allow tbem, he 
homeowners have been advised to install abort switches in he home. 
Atleast one abort switch, which shuts the dialer of immediately, will 
be placed near the dialer, in the master bedroom, or near the control 
panel. ОГ couse, some dialers have a simple on/off switch ou them, 
and they must rely on concealment alone to beat the burglar. However 
in the average home, there are not too many places that onc can 
adequately hide something as large as an autodialer. 
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Perhaps the quickest method to defeat the auto-dialer is 1o simply 
азе tie tape, Since the message is recorded on magnetic ape, an 
electromagnetic bulk raser wil leave the tape completely blank. This 
Gan also be done wih а regular magne, provided it is powerful 
‘enough. The fact that this can be done without removing or opening 
the rote cover, makes a particularly dangerous possibilty. И 
the tape subjected 10 а powerful magnet, even if the call goes 
through the pole, they will bear nothing buta constan: ising 
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Guerrilla Tactics 


"There may be cases when the burglar cannot bypass or avoid an 
aların system, therefore he may have to resort to guerilla tactics 10 
accomplish his goal. When Tsay guerilla, 1 mean a method of attack 
that is so unonhodos, no one could possibly expect it. Although the 
term guerrilla generally conjures up images of brutality and 
ruthlessness, the team here means simply that the tactics that are 
employed ше so unique, they generally leave everyone, including the 
police, temporarily stunned. Guerrilla tactics re usually only aimed 
st central station employees, or the central station itself, Биг they may 
sso be used against the police department, if the need arises 

Ideally, the central sation would be a veriuble fortes. Unfor- 
tunately, they are most often a remed building in а bad neighborhood, 
or leased unit in an office complex. The only security system that 
protects the central station is usually а TV camera at the front door, 
and а simple local alarm, Sometimes ће sales office, where one must 
о lo inquire about having an alarm installed, is adjacent to, or part 
Ol, а central monitoring station. There would obviously be much 
information to be gleaned, if one were to plant а bugging device or 
"ape recorder near the central station, during his alarm inquiry. 
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Similarly, an Infra-Red Jaser surveillance device could be shone on 
any window to pick up the juicy central station gossip. If prior access 
is impossible, the telephone wires may be cut at the meter base, 
although most central stations have standby generators, in case of a 
power failure. 


The employees of a central station also offer the burglar some 
unique possibilities. The poorly paid central station operator is ex- 
tuemely susceptible to bribery, and he may Бей 
1 disguised bugging device, if he is unaware of what в. A bug de 
Suised as an engraved ink pen, for example, may be given to him as 
a рй, in hops that he will carry it around with him, and especialy 
то work. Other employers of the agency, such as installers, can also 
ве bribed or induced into installing a system that would be very casy 
to defeat. The installer may also know, and be wiling 10 sell, the 
master code that controls someone's system. The patrol cars that the 
armed guards use when responding to an alarm drop may also be 
made useless, by slashing the tires, placing caltrops under the tires, or 
fling the roads near the proposed target with tacks, broken glass, and 
calis The engine, gas tank, and wansmisio, may als fall victim 
io various methods of incapacitation. In smaller cities, where 
comparatively few alarms are monitored, only onc or two employers 
work the Midnight to 8 A.M, shift. During this period, the central 
sation could be stormed, and the employers detained. Als, poisonous 
‘or anesthetic gas could be introduced into the central station, so that 
the operators would be disabled. Operators could also be extorted for 
sensitive information, if one could find the proper motivation, such as 
threat, money, blackmail, ee, Police departments are less vulnerable 
10 guerilla tactics, but they are certainly not Invulnerable to them. At 
а small town police department, squad cars could easily be incapac- 
itated in the same manner as described previously. Although les likely 
lo be bribed, policemen can sometimes be pressured into taking their 
обаш time when responding t0 an alarm drop. The burglar 
‘oul deo place several obstacles along the route the policeman would 
‘ake, so that he would be delayed in petting to the seene, 

The sation itself can also fll victim to sabotage, А burglar could 
bug a police station and learn a great deal, such a information on 
potential targets or police schedules. A confederate may also listen 1o 
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the police station conversation to discover whether or not an alarm 
fas been made. And since the alarm company must call the police 
department to report the alarm, the incoming telephone lines may be 
tapped ito or сш. Since the police department has а limited number 
РУП and routine lines, й alo possible for several recruits of an 
Selligent burglar to flood the 911 lines, so that the central station 
annot wet through to notify them of an alarm. This is easly ac- 
implied in the smaller police departments since they usually have 
SO more than five incoming lines. The telephone also offers the 
possiblity of using a decoy. This involves calling the police station o 
{Gt them of an awful wreck, break-in, rape-in-progres, ete, so that 
the policemen wil be dispaiched to that aren, and the burglar can 
Nor (on the opposite side of town) unhindered. One possiblity in 
Меш a large police department, where patrolling policemen are 
dispatched to alarm drops By radio, would be to actually override the 
‘frequency with another tansmiter, This would be extremely 
Expensive lo do, therefore the stakes would have to be very high. 


PART IV: 


їп the fourth and final section, we will examine the phony burglar 
alarm system, and how itis o easy recognized. No longer are these 
just the product of the do-it yourseller, but are also being produced 
‘commercially at an ever-increasing rate. There seems o be an 
insatiable demand for these devices that supposedly scare criminals 
away. You wil find, however, that they sometimes do more harm 
than good. We will abo cover some random topics thal, although 
‘elated to alarm bypassing, could not be appropriately placed in any 
ofthe preceding chapters. Finally, we wil cover the state-of-the-art 
security systems being installed today, and the future alarm systems 
that will be installed tomorrow: 
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Phony Alarms 
МАЛАЛА 


Surprisingly, itis generally believed that the burglar іа primary 
task is determing, not catching criminals. While it is true that many 
thieves wil not enter а dwelling that they believe is guarded, perhaps 
the mest dangerous type of criminals will probably disregard it The 
druperazed kid who needs some quick cash for his nest fix will 
probably not pay any attention to am alarm. Nor wil a mentally 
deranged criminal, who probably doesn't even care if anyone is home 
EG Farms ove en tn e pra agr lean 
apprehensions about entering a building that is on an authentic alarm 
system, much less a phony one. The professional wil not be impressed 
bythe Mashing lights and warning stickers, but rather will recognize 
it immediately as a complete scam 
Tt doesnt take а great deal of detective work to determine whether 
or not an alarm system is authentic. On page 98 & а typical phony 
alarm panel (sce Figure 221) Itis generally a conspicuous 
location, such as near the front door, and it usually has a red lashing 
Kiah. Тыв presumably warns that the system is armed, and is currently 
monitoring the premises. Rarely, however, are actual conul panels 
mounted out of doors, to be subjected to vandalism, and never are 
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they mounted with simple Phillipehead screws. The panel below is 
actually just a key operated switch that will simply turn the red light 
оп and off. Since the homeowner knows his system is spurious, he will 
‘occasionally forget to disarm bis system before entering his home, as 
surveillance will prove. 


Figure 21 
А phony alarm control panel r easy ю spot 


Stickers that warn of alarm systems abound in electronics and 
novelty stores. Authentic alarm stickers display the manufacturing 
company’s name and/or logo, but the generic "This Property 
Protected By Electronic Alarm System” stickers are painfully obvious 
for the initiated (ses Figure 22-2 on page 99). A professional burglar, 
‘when seeing a fake alarm system with phony stickers, may become 
суеп more intrigued with what you are trying to protect than he would 
if there were no alum at all 

‘While some security books say that a few flashing lights and an 
impressive locking key-switch will deter thieves, | believe the money 
would be better speat on а real alarm. Even though a professional can 
defeat it, a real alarm has the capability of catching a thief, rather than 
just the hope of scaring him away. 
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Figure 2222 
Phony alarm stickers may tract mare criminals than they deter. 
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Related Subjects 
АУУ A 


‘The purpose of this chapter is to examine some of the more esoterie 
subjects related to alarm bypassing Basically, there are four random, 
but important thoughts that need elaboration here. 1 decided to pile 
them inta one chapter, rather than spread them through the book 
Where they would normally belong, for fear that their imporiance may 
have been inadvertently mised. 

First one should know the various steps that some professional bur- 
ars take w improve their chances of success on a particular mision. 
Before, during, und afr a burglary, there are many techniques that 
may be employed that virtually guarantee that the heist will come off 
smoothly. Some techniques, such as wearing gloves o avoid finger- 
prints, and wearing а mask 1o avoid being recognized, are obvious 
‘Othe techniques, such as planting “artificial” clues, re not so ob- 
vious. The nemesis af any criminal is a betraying cue that links him 
"o his crime. Often this betraying clue ean take the form of a distinctive. 
modus operandi. Burglars who maintain the same procedure of 
housebreaking for any length of time may find it necessary to change 
their B and E techniques. One of the hallmarks of a true professional 
5 his ability to look incompetenily amateur, Broken windows, smash- 
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с doors, crowbar prying, all теск of amateurdom, and effectively 

throw the ensuing investigation off the scent. The only drawback of 
appearing to be a rank amateur is that one may obtain the same results 
(uch as setting off an otherwise easily defeatable alarm) that an 
amateur would 

‘Second, when am alarm is monitored by а central station, the 
‘operator receives a signal for every alarm component violated. He also 
receives a signal for every component that has been restored. This 
means that when а door, that has been opened, is suddenly closed, the 
‘operator receives а signal that corresponds to the restoral of that par- 
ticular zone, This may seem irrelevant, but if an operator receives a 
Violation, and then a restoral, he knows the door has been opened and 
then dosed H, however, he receives only a violation, with no restora, 
he may be a bit more inclined to believe that the violation is a false 
alarm, since а person would obviously close a door behind him. 

A constant source of debate among my colleagues and 1 is the 
question of the best time for a burglary. Of course, this depends tre- 
‘mendously on the cireumstunoes, but there are times that are more 
‘conducive to success than others. For example, during an electrical 
storm, а central station may receive dozens of false alarms. Ifthe 
electrical storm occurs on a Saturday aftemoon, the endless comings 
and goings of store owners, coupled with the false alarms from the 
storm, keep the operators so busy, they may not be able to handle all 
of the incoming signals. Similarly, if a burglar were to break into a 
building fifteen minutes before it was scheduled to open, the operator 
would probably dismiss any alarm as an employee having trouble 
disarming the system. 

Finally, one should be aware of the peculiarities of some local 
annunciators It would seem that if а burglar cut off the power to à 
‘ell ог horn, and caused it to sound, the batteries would eventually 
‘wear down, If this were to happen, the whole home could, of course, 
be ransacked without sounding an alarm. That is why most sirens, 
bells and horns of а local sytem, run for about ten minutes before 
shutting themselves off, so that they may preserve battery power. 
Obviously, one could keep causing the alarm io go olf, and ihe 
batteries would indeed run down eventually, but the chance of being 
‘caught increases with every alarm. 
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The Future 
Of Security Systems 


Anns 


As we've seen, most of the components of a modem burglar alarm 
system have several flaws that profesional burglars can exploit to 
render the entire system useless. But homeowners want to know that 
they are safe from the profesional burglar as well ав the amateur, 
therefore cost is по longer the sole determining factor when they buy 
ап alarm system, 

‘Burglar alarm manufacturers are aware that some of their products 
are extremely casy to bypass, and some are going back to the drawing 
boards to try and devise new and more secure methods of burglary 
detection. Some of the newest methods are biomechanical, meaning 
that they are based оп the characteristic idiosyncrasies of an in- 
dividuals body. Still others use an ever-changing coding pattern, so 
‘that no repetitive motion can be copied by someone not authorized 
to enter. For example, there are key-pads on the market today that 
cannot be seen from any angle except straght-on, and the numbers 
are abo scrambled into а different pattern every time. Thus, the same 
numeric code would use different butions cach time, so this would 
‘certainly nullify the Uhra- Violet ink method described in Chapter 13. 
Furthermore, magnetic cards are sometimes used instead of numeric 
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codes, to arm and disarm burglar alarms, but rarely in high-security 
situations, since they may simply be stolen rom their owner, 

‘Will the security industry ever stumble upon a technique that can- 
not be compromised? 1 don't know, but I'm afraid 1 have my doubts. 
Ifthe alarm is bio-mechanical, an authorized person could be drugged 
and brought to the alarm panel, and the alarm could be allowed to 
check fingerprints, eye patterns, or whatever else the alarm needed for 
positive identification. A voice could also be recorded digitally, and 
played back, if the alarm checks for voice prints. For an alarm system 
that requires the input of a code, а person could be threatened with 
violence, beaten, drugged with sodium pentothal or more humanely, 
hypnotized, so that he will reveal the code. 

One possibility for increasing criminal detection would be to 
develop an entirely passive system, so that it could not be detected by 
‘burglars. Or, one could rig a system that did not arm until someone 
‘opened a door or window. That way, а burglar could not detect the 
presence of any alarm from the outside, and would probably deem 
it safe to enter. Also, the annunciator could be made to notify the 
neighbors silently, rather than blare throughout the neighborhood (on 
an easily defeated outdoor bell) 

Some companies are now manufacturing stress sensors. These 
‘ltrasensitve units can measure any slight movement down to а few 
millionths of an inch, They sound an alarm when anyone walks on 
the stairs, the roof, or any other arca, They are generally placed on 
structural beams, although they will also work if mounted to the wall, 
ОГ cours, a stress sensor or any other component is useless if it is 
attached to à central processor that may be easily overcome, 

There may come а day when security systems become so advanced 
that по one but authorized personnel can disarm them. There may 
соте a time when we can arm our burglar alarms, and feel certain 
that we are safe from all types of criminals. But that time is not now, 
forthe vast majority of alarms installed in this country are mere delays 
forthe determined and experienced burglar. Alarm salesmen usually 
emphasize how secure youll be and feel with a propery installed 
burglar alarm system, You may fel secure, but you will certainly Бе 
far йош it Т sincerely hope that someday well all be safe in cur 
homes, but T know, as you do now, that we have a long way to go. 


“An excellent overview of all the current alarm 


“he information is up-to-date, carefully 
presented... and has a broader appeal than the 
‘non-governmental В & E crowd." 

— Surveillant 


Any alarm system can be beaten. Criminals 
have gotten past everything from junkyard dogs 
io heat-sensing museum alarms, That doesn't 
mean alarms are worthless. It means anyone 
concemed with security needs to know how 
Vulnerable these systems are. 

Techniques of Burglar Alarm Bypassing 
gives yon that knowledge. This book contains 
detailed descriptions of dozens of alarm 
systems: how they work, and how they ean be 
defeated, Alarms covered include: 
© Magnetic Switches ө Window Foil ө Sound 
and Heat Detectors ® Photoelectric Devices Ө 
Guard Dogs ® Central Station Systems @ 
Closed-Circuit Television ® And much, much 
more! 

Residential, commercial and high-security 
systems are described in plain English, with 
plenty of helpful illustrations. 

Find ош what youre missing — before 
youre missing everything. Get Techniques of 
‘Burglar Alarm Bypassing today! 
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